bdddca95b1e61c99955c4f4ed98c4f33

Sharing

Copy URL Twitter E-mail

General

Target

bdddca95b1e61c99955c4f4ed98c4f33
Size

409KB
MD5

bdddca95b1e61c99955c4f4ed98c4f33
SHA1

aab3d657b0c2f4843365ccdf2b4430ce86dbb629
SHA256

49be24f977aec29aba24c90551ee8f580307f04e6d2330f7bf25f16353602230
SHA512

9a2df1a7f0cb097264b1ff942347f016bbcf8f932f7479cbcb0aa7da395cf96e4b01499b486b3dfc5ebd05c86be9ddad9eedeaf33385821f4e099acb46d3947e
SSDEEP

12288:lr31XaoS99XxfeBrByOMFzNYtktAEj8yIhMwqY:lZjS/xfeB1X+h4fEj8yIhq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bdddca95b1e61c99955c4f4ed98c4f33

Files

bdddca95b1e61c99955c4f4ed98c4f33
.exe windows:5 windows x86 arch:x86

bad780e6701da726440140fa86260f2e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\svnwork\stormplayer\trunk\bin\Release\BaofengPlatform.pdb

Imports

ws2_32

WSAStartup
WSACleanup

crt

ord19
ord33
ord99
ord56
ord55
ord36
ord10
ord61
ord29
ord58
ord59
ord94
ord117
ord38
ord27
ord26
ord25
ord32
ord3
ord4
ord84
ord23
ord24
ord18
ord62

kernel32

GetProcAddress
MultiByteToWideChar
GetTickCount
CreateEventW
WaitForSingleObject
SetEvent
TerminateThread
lstrlenW
SetLastError
LeaveCriticalSection
EnterCriticalSection
GetCurrentProcess
FlushInstructionCache
GetCurrentThreadId
GetModuleHandleW
lstrcmpiW
RaiseException
GetLastError
SizeofResource
LoadResource
FindResourceW
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
InterlockedDecrement
InterlockedIncrement
OpenEventW
WaitForMultipleObjects
CreateMutexW
GlobalUnlock
GlobalLock
GlobalAlloc
MulDiv
lstrcmpW
OpenMutexW
LockResource
LoadLibraryW
CreateProcessW
Sleep
GetLocalTime
GetVersionExW
lstrcpyW
lstrcmpiA
LocalAlloc
LocalLock
LocalUnlock
LocalFree
HeapAlloc
GetProcessHeap
HeapFree
GlobalMemoryStatusEx
CreateFileMappingA
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetCommandLineW
GetStartupInfoW
HeapSetInformation
InterlockedExchange
DecodePointer
EncodePointer
HeapSize
HeapReAlloc
HeapDestroy
InterlockedPopEntrySList
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
InterlockedPushEntrySList
InterlockedCompareExchange
FindResourceExW
GetModuleFileNameW
FlushViewOfFile
LoadLibraryExW
CreateFileW
GetFileSize
ReadFile
CloseHandle
CreateFileMappingW
MapViewOfFile
WideCharToMultiByte
UnmapViewOfFile
FreeLibrary

user32

SetWindowTextA
OffsetRect
CopyRect
InflateRect
GetWindowDC
GetMenuItemCount
SystemParametersInfoW
UpdateWindow
GetPropA
ShowWindow
SetParent
TrackPopupMenu
DialogBoxParamW
DestroyMenu
GetMenuItemInfoW
UnhookWindowsHookEx
SetRectEmpty
GetClassLongW
FindWindowA
IsIconic
IsWindowVisible
PostMessageW
EnumThreadWindows
GetWindowThreadProcessId
FindWindowW
FindWindowExW
GetSubMenu
LoadMenuW
SetForegroundWindow
GetCursorPos
LoadIconW
PostQuitMessage
SetRect
KillTimer
SetTimer
EndDialog
GetMenuState
RemoveMenu
SetMenuItemInfoW
MessageBoxA
wsprintfW
keybd_event
TrackMouseEvent
SetClassLongW
SetPropA
SetWindowsHookExW
PtInRect
CallNextHookEx
GetClassNameA
GetMenuInfo
SetDlgItemTextW
LoadBitmapW
LoadImageW
GetWindowRect
MapWindowPoints
IsDialogMessageW
GetSystemMetrics
GetMonitorInfoW
MonitorFromWindow
DrawTextW
RegisterWindowMessageW
GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
BeginPaint
EndPaint
IsChild
GetFocus
SetFocus
GetWindow
GetDlgItem
SendMessageW
IsWindow
GetClassNameW
GetSysColor
SetWindowPos
RedrawWindow
GetClassInfoExW
CreateWindowExW
DestroyWindow
CreateAcceleratorTableW
ClientToScreen
GetParent
ScreenToClient
MoveWindow
SetCapture
ReleaseCapture
FillRect
GetClientRect
InvalidateRgn
InvalidateRect
GetDC
ReleaseDC
GetDesktopWindow
DestroyAcceleratorTable
LoadCursorW
RegisterClassExW
CallWindowProcW
GetWindowLongW
SetWindowLongW
DefWindowProcW
CharNextW
GetMessageW
DispatchMessageW
TranslateMessage
PeekMessageW
UnregisterClassA
SetMenuInfo
MonitorFromPoint

gdi32

SetBkColor
ExtTextOutW
CreatePen
CreateFontIndirectW
SetTextColor
Rectangle
GetClipBox
ExcludeClipRect
SetBkMode
StretchBlt
CreateDIBitmap
CreatePalette
SelectPalette
RealizePalette
CreatePatternBrush
CreateSolidBrush
GetObjectW
GetDeviceCaps
BitBlt
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
DeleteObject
GetStockObject
DeleteDC

advapi32

RegOpenKeyExW
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegDeleteKeyW
RegEnumKeyExW
RegQueryInfoKeyW
RegCloseKey

shell32

SHGetSpecialFolderPathW
Shell_NotifyIconW
ShellExecuteW
SHChangeNotify

ole32

CoInitialize
CoUninitialize
CoTaskMemRealloc
CoTaskMemAlloc
CoCreateInstance
OleUninitialize
StringFromGUID2
OleLockRunning
CreateStreamOnHGlobal
CoGetClassObject
CLSIDFromProgID
CLSIDFromString
OleInitialize
CoLoadLibrary
CoFreeLibrary
CoInitializeEx
CoTaskMemFree

oleaut32

SysAllocStringLen
VarBstrCmp
VariantInit
VariantClear
LoadTypeLi
LoadRegTypeLi
SysStringLen
OleCreateFontIndirect
VarUI4FromStr
SysFreeString
SysAllocString

shlwapi

StrStrIW
PathAppendW
StrCmpNIW
PathFileExistsW
PathRemoveFileSpecW

comctl32

InitCommonControlsEx

msimg32

TransparentBlt

gdiplus

GdipDeleteGraphics
GdipSetInterpolationMode
GdipSetPixelOffsetMode
GdipDrawImageRectRectI
GdipFree
GdipDisposeImage
GdipAlloc
GdipCloneImage
GdipGetImageWidth
GdipGetImageHeight
GdipLoadImageFromStream
GdiplusStartup
GdiplusShutdown
GdipCreateFromHDC

msvcr100

__dllonexit
_lock
_onexit
_amsg_exit
__wgetmainargs
_cexit
_exit
_XcptFilter
exit
_wcmdln
_unlock
?terminate@@YAXXZ
memset
_snwprintf
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_commode
_fmode
__set_app_type
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
_invoke_watson
_controlfp_s
calloc
fclose
fseek
??3@YAXPAX@Z
??_U@YAPAXI@Z
??_V@YAXPAX@Z
wcsstr
wcschr
ftell
wcsncpy_s
wcscpy_s
_beginthreadex
memcpy_s
malloc
_recalloc
memmove_s
??2@YAPAXI@Z
swprintf_s
_vscwprintf
vswprintf_s
_purecall
wmemcpy_s
wcsnlen
_wcsicmp
??0exception@std@@QAE@ABQBD@Z
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABV01@@Z
?what@exception@std@@UBEPBDXZ
memmove
_wtoi
iswspace
swscanf
_wcslwr_s
fopen
free
fread
fwrite
__CxxFrameHandler3
memcpy
_CxxThrowException

msvcp100

?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z

iphlpapi

GetIfTable

Sections

.text
Size: 158KB - Virtual size: 157KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 194KB - Virtual size: 196KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

bad780e6701da726440140fa86260f2e

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

ws2_32

crt

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

shlwapi

comctl32

msimg32

gdiplus

msvcr100

msvcp100

iphlpapi

Sections

.text Size: 158KB - Virtual size: 157KB

.rdata Size: 46KB - Virtual size: 46KB

.data Size: 10KB - Virtual size: 12KB

.rsrc Size: 194KB - Virtual size: 196KB

.text
Size: 158KB - Virtual size: 157KB

.rdata
Size: 46KB - Virtual size: 46KB

.data
Size: 10KB - Virtual size: 12KB

.rsrc
Size: 194KB - Virtual size: 196KB