5e7b6a64f87ad0fe51cfa66e5155d5cc93487b386b353df71825b0518fa5c842

Sharing

Copy URL Twitter E-mail

General

Target

5e7b6a64f87ad0fe51cfa66e5155d5cc93487b386b353df71825b0518fa5c842
Size

816KB
MD5

8abfe889e8f4585cb6d349a301f1bb3e
SHA1

fb33ec8b56e2bf078a585f93426cb4001b99886d
SHA256

5e7b6a64f87ad0fe51cfa66e5155d5cc93487b386b353df71825b0518fa5c842
SHA512

9732fbca27140f79fd291560644e2518ff9e94e6eb0b9fce05c2bc81ec957ea58b4f550d03cf3fd996dc8a6ebd5d42285835005e998de71c1a03023bd5432b6a
SSDEEP

24576:+k89bwnkWEhYB9RnioAdIkuuQSvkWUfibAU+:Q9bwn/EhS2oAyF1WUfiP+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5e7b6a64f87ad0fe51cfa66e5155d5cc93487b386b353df71825b0518fa5c842

Files

5e7b6a64f87ad0fe51cfa66e5155d5cc93487b386b353df71825b0518fa5c842
.exe windows:4 windows x86 arch:x86

2ae7fbe5591112615634d303fbe7c11a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\jk_9\workspace\CBB_DH3.4303_Player-lite_package\code_path\Main\Release\Win32\X Player.pdb

Imports

sf_uibase_r

?UnAssociateFiletoApp@CSFUIFactory@@SAHPB_W@Z
??_7ISFComboBoxEvent@@6B@
?CreateUIComboBox@CSFUIFactory@@SAPAVCSFComboBox@@PAVISFComboBoxEvent@@@Z
?DestroyUIEditCtrl@CSFUIFactory@@SAXPAVCSFEditCtrl@@@Z
?DestroyUIComboBox@CSFUIFactory@@SAXPAVCSFComboBox@@@Z
?CreateUIListCtrl@CSFUIFactory@@SAPAVCSFListCtrl@@PAVISFListCtrlEvent@@@Z
?DestroyUIListCtrl@CSFUIFactory@@SAXPAVCSFListCtrl@@@Z
?CreateUIEditCtrl@CSFUIFactory@@SAPAVCSFEditCtrl@@PAVISFEditCtrlEvent@@@Z
?EDIT_OnTextChange@ISFEditCtrlEvent@@UAEXIPA_W@Z
?EDIT_OnEditingFinished@ISFEditCtrlEvent@@UAEXIPA_W@Z
??_7ISFEditCtrlEvent@@6B@
?GetDesktopRect@CSFUIFactory@@SAXAAUtagRECT@@@Z
?PtInRect@CSFRect@@QBEHUtagPOINT@@@Z
?CreateFileDialog@CSFUIFactory@@SAHPAUFilePathInfo@@PA_WHHPAUSelectFolderUI@@PB_W3K3PAX@Z
?DeflateRect@CSFRect@@QAEXHH@Z
?CreateUIPlayProgressPanel@CSFUIFactory@@SAPAVCSFPlayProgressPanel@@PAVIPlayProgressEvent@@@Z
?DestroyUIPlayProgressPanel@CSFUIFactory@@SAXPAVCSFPlayProgressPanel@@@Z
?OnMouseOverChannel@IPlayProgressEvent@@UAEXIHUtagPOINT@@H@Z
?PPP_OnMouseLeave@IPlayProgressEvent@@UAEXI@Z
?UIPostMessage@CSFUIFactory@@SAXPAXH0@Z
?CreateUIMainWindow@CSFUIFactory@@SAPAVCSFDialog@@PAVISFDialogEvent@@PAX@Z
?DestroyUIMainWindow@CSFUIFactory@@SAXPAVCSFDialog@@@Z
?Quit@CSFUIFactory@@SAXXZ
?SetResourcePath@CSFUIFactory@@SAXPB_W@Z
?UnInstall@CSFUIFactory@@SAXXZ
?Install@CSFUIFactory@@SAXXZ
?AssociateFiletoApp@CSFUIFactory@@SAHPB_W0H@Z
?IsFileAssociatetoApp@CSFUIFactory@@SAHPB_W@Z
?MainLoop@CSFUIFactory@@SAHXZ
?SetFontProperty@CSFUIFactory@@SAXHAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?SetRect@CSFRect@@QAEXHHHH@Z
?OnItemClick@ISFTreeCtrlEvent@@UAEHPAXI@Z
??_7ISFTreeCtrlEvent@@6B@
?OnItemCheckBoxClick@ISFTreeCtrlEvent@@UAEXPAXI@Z
??_7ISFViewEvent@@6B@
??1ISFViewEvent@@UAE@XZ
?OnShowWindow@ISFViewEvent@@UAEXH@Z
?OnLButtonDown@ISFViewEvent@@UAEXIUtagPOINT@@@Z
?OnLButtonDblClk@ISFViewEvent@@UAEXIUtagPOINT@@@Z
?CreateUITreeCtrl@CSFUIFactory@@SAPAVCSFTreeCtrl@@PAVISFTreeCtrlEvent@@@Z
?CreateUIView@CSFUIFactory@@SAPAVCSFView@@PAVISFViewEvent@@@Z
?DestroyUITreeCtrl@CSFUIFactory@@SAXPAVCSFTreeCtrl@@@Z
?DestroyUIView@CSFUIFactory@@SAXPAVCSFView@@@Z
??_7ISFSliderCtrlEvent@@6B@
?GetUIWnd@ISFViewEvent@@QAEPAXXZ
?BTN_OnLButtonDown@ISFButtonEvent@@UAEXHIUtagPOINT@@@Z
?BTN_OnLButtonUp@ISFButtonEvent@@UAEXHIUtagPOINT@@@Z
?CreateUISliderCtrl@CSFUIFactory@@SAPAVCSFSliderCtrl@@PAVISFSliderCtrlEvent@@@Z
?DestroyUISliderCtrl@CSFUIFactory@@SAXPAVCSFSliderCtrl@@@Z
?VideoWidow_OnLButtonDown@ISFVideoWindowEvent@@UAEXHHAAUtagPOINT@@@Z
?OnSubWinZoom@ISFVideoWindowEvent@@UAEXHHH@Z
?OnSubWndExchanged@ISFVideoWindowEvent@@UAEXHH@Z
?VideoWidow_OnLButtonUp@ISFVideoWindowEvent@@UAEXHHAAUtagPOINT@@@Z
?OnSubWinOccupyRoom@ISFVideoWindowEvent@@UAEXHHH@Z
?OnPaintFailed@ISFVideoWindowEvent@@UAEXH@Z
?CreateUIRadioBox@CSFUIFactory@@SAPAVCSFRadioBox@@PAVISFRadioBoxEvent@@@Z
?CreateUIVideoWindow@CSFUIFactory@@SAPAVCSFVideoWindow@@W4VIDEOWINDOWMODE@@PAVISFVideoWindowEvent@@HH@Z
?CreateUINumSpiner@CSFUIFactory@@SAPAVCSFNumSpiner@@PAVISFNumSpinerEvent@@@Z
?DestroyUIRadioBox@CSFUIFactory@@SAXPAVCSFRadioBox@@@Z
?GetDefaultLayout@CSFVideoWindow@@SAPB_WW4LAYOUT_TYPE@@@Z
?DestroyUIVideoWindow@CSFUIFactory@@SAXPAVCSFVideoWindow@@@Z
?DestroyUINumSpiner@CSFUIFactory@@SAXPAVCSFNumSpiner@@@Z
??_7ISFNumSpinerEvent@@6B@
??1ISFVideoWindowEvent@@UAE@XZ
?OnCreate@ISFVideoWindowEvent@@UAEHXZ
?OnDestroy@ISFVideoWindowEvent@@UAEXXZ
?OnSize@ISFVideoWindowEvent@@UAEXIHH@Z
?BTN_OnMouseMove@ISFButtonEvent@@UAEXHIUtagPOINT@@@Z
??_7ISFRadioBoxEvent@@6B@
?OnBnClickedVideoClose@ISFVideoWindowEvent@@UAEXHH@Z
??_7ISFVideoWindowEvent@@6B@
?OnBnClickedVideoSnap@ISFVideoWindowEvent@@UAEXHH@Z
?BTN_OnMouseLeave@ISFButtonEvent@@UAEXHIJ@Z
?OnBnClickedVideoRecord@ISFVideoWindowEvent@@UAEXHHH@Z
?OnBnClickedVideoProperty@ISFVideoWindowEvent@@UAEXHH@Z
?RADIO_OnShowWindow@ISFRadioBoxEvent@@UAEXHIH@Z
?OnFocusWndChanged@ISFVideoWindowEvent@@UAEXHH@Z
?Dlg_Close@ISFDialogEvent@@UAEHXZ
?OnDlgKeyDown@ISFDialogEvent@@UAEXII@Z
?OnDlgNcActivate@ISFDialogEvent@@UAEXH@Z
?OnDlgFileDrop@ISFDialogEvent@@UAEXPB_W@Z
?OnDlgMouseLeave@ISFDialogEvent@@UAEXXZ
?BTN_OnCustomerClicked@ISFButtonEvent@@UAEXXZ
?OnDlgMouseHover@ISFDialogEvent@@UAEXXZ
?CreateUIDialog@CSFUIFactory@@SAPAVCSFDialog@@PAVISFDialogEvent@@PAX@Z
?CreateUIButton@CSFUIFactory@@SAPAVCSFButton@@PAVISFButtonEvent@@@Z
?OnDlgShowWindow@ISFDialogEvent@@UAEXHI@Z
?OffsetRect@CSFRect@@QAEXHH@Z
?CreateUIStatic@CSFUIFactory@@SAPAVCSFStatic@@PAVISFStaticEvent@@@Z
?OnDlgTimer@ISFDialogEvent@@UAEXI@Z
?CreateUIPictureCtrl@CSFUIFactory@@SAPAVCSFPictureCtrl@@PAVISFPictureCtrlEvent@@@Z
??_7CSFEventBase@@6B@
?DestroyUIDialog@CSFUIFactory@@SAXPAVCSFDialog@@@Z
?OnMsgScreenLock@ISFDialogEvent@@UAEXH@Z
?DestroyUIButton@CSFUIFactory@@SAXPAVCSFButton@@@Z
?OnDisplayChange@ISFDialogEvent@@UAEXHHH@Z
?DestroyUIStatic@CSFUIFactory@@SAXPAVCSFStatic@@@Z
??_7ISFButtonEvent@@6B@
?MoveToXY@CSFRect@@QAEXHH@Z
?DestroyUIPictureCtrl@CSFUIFactory@@SAXPAVCSFPictureCtrl@@@Z
?BTN_OnClicked@ISFButtonEvent@@UAEXH@Z
?GetCurrentPath@CSFUIFactory@@SAPA_WXZ
??1ISFDialogEvent@@UAE@XZ
?OnDlgSize@ISFDialogEvent@@UAEXIAAH0@Z
?GetUIWnd@ISFDialogEvent@@QAEPAXXZ
?Dlg_OnOK@ISFDialogEvent@@UAEXXZ
??_7ISFDialogEvent@@6B@
?Dlg_OnCancel@ISFDialogEvent@@UAEXXZ
?OnKeyEscapeClicked@ISFDialogEvent@@UAEXXZ

playmodule

?GroupPlay_DelFromPlayGroup@CPlayModule@PLAY_MODULE@@QAEHPAV12@@Z
?GroupPlay_AddToPlayGroup@CPlayModule@PLAY_MODULE@@QAEHPAV12@@Z
?GroupPlay_Open@CPlayModule@PLAY_MODULE@@QAEHXZ
??1CPlayModule@PLAY_MODULE@@UAE@XZ
??0CPlayModule@PLAY_MODULE@@QAE@PAVIPlayModuleListener@1@@Z
?GroupPlay_Close@CPlayModule@PLAY_MODULE@@QAEHXZ
?GroupPlay_QueryGroupPlayingTime@CPlayModule@PLAY_MODULE@@QAEHPAU__DATETIME_INFO@@@Z
?GroupPlay_Seek@CPlayModule@PLAY_MODULE@@QAEHI@Z
?GroupPlay_Resume@CPlayModule@PLAY_MODULE@@QAEHXZ
?GroupPlay_Pause@CPlayModule@PLAY_MODULE@@QAEHXZ
?GroupPlay_SetPlaySpeed@CPlayModule@PLAY_MODULE@@QAEHM@Z
?ChooseSoundChannel@CPlayModule@PLAY_MODULE@@QAEHK@Z
?Pause@CPlayModule@PLAY_MODULE@@QAEHXZ
?StopDataRecord@CPlayModule@PLAY_MODULE@@QAEHXZ
?Close@CPlayModule@PLAY_MODULE@@QAEHXZ
?StartDataRecord@CPlayModule@PLAY_MODULE@@QAEHPADH@Z
?Stop@CPlayModule@PLAY_MODULE@@QAEHXZ
?SetRotateAngle@CPlayModule@PLAY_MODULE@@QAEHH@Z
?Play@CPlayModule@PLAY_MODULE@@QAEHPAX@Z
?Open@CPlayModule@PLAY_MODULE@@QAEHPAD0@Z
?SetRefValue@CPlayModule@PLAY_MODULE@@QAEHPAEI@Z
?GetRefValue@CPlayModule@PLAY_MODULE@@QAEHPAEPAI@Z
?CloseIVSTrack@CPlayModule@PLAY_MODULE@@QAEHXZ
?OpenIVSTrack@CPlayModule@PLAY_MODULE@@QAEHXZ
?StepBackward@CPlayModule@PLAY_MODULE@@QAEHXZ
?StepForward@CPlayModule@PLAY_MODULE@@QAEHXZ
?GetCurrentPlayTime@CPlayModule@PLAY_MODULE@@QAEIXZ
?SetColor@CPlayModule@PLAY_MODULE@@QAEHHHHH@Z
?RenderLastFrame@CPlayModule@PLAY_MODULE@@QAEHXZ
?GetFileEndTime@CPlayModule@PLAY_MODULE@@QAEIXZ
?GetCurrentVideoFrameRate@CPlayModule@PLAY_MODULE@@QAEIXZ
?GetFileStartTime@CPlayModule@PLAY_MODULE@@QAEIXZ
??_7IPlayModuleListener@PLAY_MODULE@@6B@
?QueryInfo@CPlayModule@PLAY_MODULE@@QAEHHPADHPAH@Z
?GetMediaInfo@CPlayModule@PLAY_MODULE@@QAEHPAUMEDIA_INFO@@@Z
?GroupPlay_PlayBackward@CPlayModule@PLAY_MODULE@@QAEHXZ
?PlayBackward@CPlayModule@PLAY_MODULE@@QAEHXZ
?GetCurrentPlayingVideoFrameHeight@CPlayModule@PLAY_MODULE@@QAEIXZ
?PlayForward@CPlayModule@PLAY_MODULE@@QAEHXZ
?SetCurrentPlayingVideoFrameHeight@CPlayModule@PLAY_MODULE@@QAEXI@Z
?SnapPicture@CPlayModule@PLAY_MODULE@@QAEHPADW4PM_IMAGE_TYPE@@@Z
?GetCurrentPlayingVideoFrameWidth@CPlayModule@PLAY_MODULE@@QAEIXZ
?AdjustWaveAudio@CPlayModule@PLAY_MODULE@@QAEHH@Z
??1IPlayModuleListener@PLAY_MODULE@@UAE@XZ
?SetCurrentPlayingVideoFrameWidth@CPlayModule@PLAY_MODULE@@QAEXI@Z
?IsGetFileTimeInfo@CPlayModule@PLAY_MODULE@@QAEHXZ
?CloseAudio@CPlayModule@PLAY_MODULE@@QAEHXZ
?SetFileTimeInfo@CPlayModule@PLAY_MODULE@@QAEXII@Z
?OpenAudio@CPlayModule@PLAY_MODULE@@QAEHXZ
?SetSpeed@CPlayModule@PLAY_MODULE@@QAEHM@Z
?GetFilePlayedTime@CPlayModule@PLAY_MODULE@@QAEIXZ
?Seek@CPlayModule@PLAY_MODULE@@QAEHIH@Z
?GetTimePicture@CPlayModule@PLAY_MODULE@@QAEHPAD@Z
?Seek@CPlayModule@PLAY_MODULE@@QAEHM@Z
?Resume@CPlayModule@PLAY_MODULE@@QAEHXZ
??1CPlaySdkWrapper@PLAY_MODULE@@UAE@XZ
??1IAVIConvertListener@PLAY_MODULE@@UAE@XZ
?Stop@CPlaySdkWrapper@PLAY_MODULE@@QAEHXZ
?SetAVIConvertListener@CPlaySdkWrapper@PLAY_MODULE@@QAEHPAVIAVIConvertListener@2@@Z
?InputData@CPlaySdkWrapper@PLAY_MODULE@@QAEHPAEK@Z
?CloseStream@CPlaySdkWrapper@PLAY_MODULE@@QAEHXZ
?GetBufferValue@CPlaySdkWrapper@PLAY_MODULE@@QAEKK@Z
?GetSourceBufferRemain@CPlaySdkWrapper@PLAY_MODULE@@QAEKXZ
??_7IAVIConvertListener@PLAY_MODULE@@6B@
?StopAVIConvert@CPlaySdkWrapper@PLAY_MODULE@@QAEHXZ
??0CPlaySdkWrapper@PLAY_MODULE@@QAE@XZ
?GroupPlay_PlayForward@CPlayModule@PLAY_MODULE@@QAEHXZ
?IsPlaying@CPlayModule@PLAY_MODULE@@QAEHXZ

ivsdrawer

??AValue@Json@@QAEAAV01@I@Z
??AValue@Json@@QAEAAV01@PBD@Z
?size@Value@Json@@QBEIXZ
?asInt@Value@Json@@QBEHXZ
?asString@Value@Json@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
??4Value@Json@@QAEAAV01@ABV01@@Z
ord10
??1Value@Json@@QAE@XZ
?toStyledString@Value@Json@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?parse@Reader@Json@@QAE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAVValue@2@_N@Z
??0Reader@Json@@QAE@XZ
ord1
ord9
ord11
ord4
ord23
ord27
ord2
??0Value@Json@@QAE@W4ValueType@1@@Z
ord6

kernel32

GetCPInfo
GetStartupInfoA
GetFileType
SetHandleCount
HeapSize
InterlockedDecrement
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleHandleA
GetStdHandle
RaiseException
RtlUnwind
GetDriveTypeA
FileTimeToLocalFileTime
FileTimeToSystemTime
GetSystemTimeAsFileTime
GetProcessHeap
HeapAlloc
GetVersionExA
HeapFree
GetCommandLineA
GetFileAttributesA
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
FlushFileBuffers
GetStringTypeA
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
GetStringTypeW
GetUserDefaultLCID
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileW
SetEndOfFile
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetStringTypeExA
LCMapStringW
ResetEvent
SetEvent
CreateEventA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
SetFilePointer
ReadFile
WriteFile
GetDiskFreeSpaceExA
GetCurrentDirectoryA
FindFirstFileA
DeleteFileA
CreateDirectoryA
CreateThread
MultiByteToWideChar
WideCharToMultiByte
GetTickCount
OutputDebugStringW
SetLastError
FindNextFileW
FindFirstFileW
FindClose
CreateFileA
ExitProcess
CloseHandle
GetCurrentThreadId
GetModuleFileNameA
LoadLibraryA
GetCurrentProcess
SetUnhandledExceptionFilter
SetErrorMode
GetProcAddress
LoadLibraryW
FreeLibrary
QueryPerformanceCounter
QueryPerformanceFrequency
WaitForSingleObject
GetModuleHandleW
Sleep
GetFileAttributesW
GetModuleFileNameW
GetCurrentProcessId
GetLastError
CreateMutexW
OutputDebugStringA
GetConsoleCP
GetConsoleMode
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
GetTimeZoneInformation
GetFullPathNameA
GetLocaleInfoA
VirtualAlloc
HeapReAlloc
InterlockedExchange
InterlockedCompareExchange
SetStdHandle

user32

GetSystemMetrics
MessageBoxW
SetTimer
KillTimer
DefWindowProcW
DestroyWindow
RegisterClassExW
UnregisterClassW
CreateWindowExW
PostMessageW
EnumWindows
SendMessageW
GetWindowTextW
GetWindowLongW
GetWindowThreadProcessId
MessageBoxExW
LoadStringA

advapi32

CryptReleaseContext
CryptGenRandom
CryptAcquireContextW

shell32

ShellExecuteA

Sections

.text
Size: 608KB - Virtual size: 607KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 132KB - Virtual size: 130KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2ae7fbe5591112615634d303fbe7c11a

Headers

File Characteristics

PDB Paths

Imports

sf_uibase_r

playmodule

ivsdrawer

kernel32

user32

advapi32

shell32

Sections

.text Size: 608KB - Virtual size: 607KB

.rdata Size: 132KB - Virtual size: 130KB

.data Size: 52KB - Virtual size: 71KB

.rsrc Size: 20KB - Virtual size: 17KB

.text
Size: 608KB - Virtual size: 607KB

.rdata
Size: 132KB - Virtual size: 130KB

.data
Size: 52KB - Virtual size: 71KB

.rsrc
Size: 20KB - Virtual size: 17KB