ace_player[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

ace_player.exe
Size

114KB
MD5

7f1ecfcf13685da1ab0930eea2169efc
SHA1

ba4ffb04420d8e97c7432e33539965a9a7244c05
SHA256

5a980efa43ae7a87a6b3e7503350e6f2ea8265668a31fd54646d227a14037eaf
SHA512

2b005bcc6de8a092f6d3a2363b70d7a60c1f1de467ebd57ec7b03fcae4f4ab9b0a70ad97c50e59671daf39d289772d6b668dfcbd55ed2986a43e247a27b6db82
SSDEEP

1536:Kf6cpRH5COSVOGJLEwa4E0OeNxyqm46/e:y6c7Ej7GwaJnim4J

Score

1^/10

Malware Config

Signatures

Files

ace_player.exe
.exe windows:4 windows x86 arch:x86

Password: asdfghdfsdaddfgsf

3327167eb3e900455b013724d3955b88

Code Sign

10:70:9d:4f:f5:54:08:d7:30:60:01:d8:ea:91:75:bb
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

24/08/2011, 00:00

Not After

30/05/2020, 10:48

Subject

CN=COMODO Code Signing CA 2,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

f0:03:dc:90:3b:68:8f:76:31:e8:27:b8:ef:2a:82:ed
Certificate

Issuer

CN=COMODO Code Signing CA 2,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

28/05/2014, 00:00

Not After

28/05/2015, 23:59

Subject

CN=Innovative Digital Technologies,O=Innovative Digital Technologies,POSTALCODE=01032,STREET=38/40 A T.Shevchenko Blvd.,L=Kiev,ST=Kiev,C=UA

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

13:55:d5:81:58:92:dd:52:87:26:53:e3:13:a0:0b:71:7b:0f:10:6d
Signer

Actual PE Digest

13:55:d5:81:58:92:dd:52:87:26:53:e3:13:a0:0b:71:7b:0f:10:6d

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

libtsplayer

libvlc_add_intf
libvlc_new
libvlc_playlist_play
libvlc_release
libvlc_set_user_agent
libvlc_wait

kernel32

CloseHandle
DeleteCriticalSection
EnterCriticalSection
ExitProcess
FreeLibrary
GetCommandLineA
GetCommandLineW
GetCurrentProcessId
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetVersionExW
HeapSetInformation
InitializeCriticalSection
InterlockedExchange
IsDBCSLeadByteEx
IsDebuggerPresent
LeaveCriticalSection
LoadLibraryW
LocalFree
MultiByteToWideChar
OpenProcess
SetUnhandledExceptionFilter
Sleep
VirtualQuery
WideCharToMultiByte

msvcrt

__getmainargs
__lc_codepage
__mb_cur_max
__p__environ
__p__fmode
__set_app_type
_cexit
_errno
_iob
_onexit
_setmode
_wfopen
atexit
exit
fclose
fflush
fputc
free
fwprintf
getenv
localeconv
malloc
signal
strcat
strlen
wcscmp
wcslen

psapi

EnumProcessModules

shell32

CommandLineToArgvW

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 82KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gnu_deb
Size: 512B - Virtual size: 28B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: asdfghdfsdaddfgsf

3327167eb3e900455b013724d3955b88

Code Sign

10:70:9d:4f:f5:54:08:d7:30:60:01:d8:ea:91:75:bbCertificate

Extended Key Usages

Key Usages

f0:03:dc:90:3b:68:8f:76:31:e8:27:b8:ef:2a:82:edCertificate

Extended Key Usages

Key Usages

13:55:d5:81:58:92:dd:52:87:26:53:e3:13:a0:0b:71:7b:0f:10:6dSigner

Headers

DLL Characteristics

File Characteristics

Imports

libtsplayer

kernel32

msvcrt

psapi

shell32

Sections

.text Size: 23KB - Virtual size: 22KB

.data Size: 512B - Virtual size: 40B

.rdata Size: 2KB - Virtual size: 1KB

.bss Size: - Virtual size: 2KB

.idata Size: 2KB - Virtual size: 1KB

.rsrc Size: 82KB - Virtual size: 82KB

.gnu_deb Size: 512B - Virtual size: 28B

10:70:9d:4f:f5:54:08:d7:30:60:01:d8:ea:91:75:bb
Certificate

f0:03:dc:90:3b:68:8f:76:31:e8:27:b8:ef:2a:82:ed
Certificate

13:55:d5:81:58:92:dd:52:87:26:53:e3:13:a0:0b:71:7b:0f:10:6d
Signer

.text
Size: 23KB - Virtual size: 22KB

.data
Size: 512B - Virtual size: 40B

.rdata
Size: 2KB - Virtual size: 1KB

.bss
Size: - Virtual size: 2KB

.idata
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 82KB - Virtual size: 82KB

.gnu_deb
Size: 512B - Virtual size: 28B