4dc4650abdc6a935fc92beac76c24ba2b0f954cae35a6474b428d7ba2afcf656

Sharing

Copy URL Twitter E-mail

General

Target

4dc4650abdc6a935fc92beac76c24ba2b0f954cae35a6474b428d7ba2afcf656
Size

3.7MB
MD5

77d37375ad1549edaf9b2ec09368a280
SHA1

a2e1be765b73423d229252b38e15cb8bcaa785fc
SHA256

4dc4650abdc6a935fc92beac76c24ba2b0f954cae35a6474b428d7ba2afcf656
SHA512

2a824c04de07e1358dc608ffc4f4fa2c6e89e0924fce0cc147dd94458182ab82f97ff8835850ddadbc21a12e4c32eacdb0cb3f51361ae6b666cfa603eaf0cb40
SSDEEP

98304:0Sb8h6kx4ILs1vfkDifSiVFjz1unJCWOKUhMFLOAkGkzdnEVomFHKnPJ:0Sb8h6kxiMO7rlWOKUhMFLOyomFHKnP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4dc4650abdc6a935fc92beac76c24ba2b0f954cae35a6474b428d7ba2afcf656

Files

4dc4650abdc6a935fc92beac76c24ba2b0f954cae35a6474b428d7ba2afcf656
.exe windows:5 windows x86 arch:x86

0b68aacb8b501446fbc44d109c743007

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\ptu\ptu_XT2\Release\ptu.pdb

Imports

bygk_core

?bygk_init@bygk_core@@QAEHPAX@Z
??0bygk_core@@QAE@XZ
?saveScreenshotBMP@bygk_core@@QAE_NPAD@Z
?bygk_get_duration@bygk_core@@QAE_JXZ
?bygk_seek_frame@bygk_core@@QAEHH@Z
?bygk_play_and_pause@bygk_core@@QAEHHPAD@Z
?bygk_setOSDRect@bygk_core@@QAEHHHHH@Z
?bygk_setOSDSize@bygk_core@@QAEHH@Z
?bygk_setOSD@bygk_core@@QAEHPAD@Z
?bygk_disconnect@bygk_core@@QAEHXZ
?bygk_repaint_windows@bygk_core@@QAEHXZ
?bygk_sendCommand@bygk_core@@QAEHJABUtagVARIANT@@@Z
?bygk_connect@bygk_core@@QAEHPAD@Z
??1bygk_core@@QAE@XZ

avcodec-58

av_init_packet
av_packet_unref
avcodec_alloc_context3
avcodec_close
avcodec_find_decoder
avcodec_free_context
avcodec_open2
avcodec_parameters_from_context
avcodec_parameters_to_context

avformat-58

av_find_input_format
av_interleaved_write_frame
av_probe_input_buffer
av_read_frame
av_write_trailer
avformat_alloc_context
avformat_alloc_output_context2
avformat_close_input
avformat_find_stream_info
avformat_free_context
avformat_new_stream
avformat_open_input
avformat_write_header
avio_alloc_context
avio_close
avio_context_free
avio_flush
avio_open

avutil-56

av_malloc
av_strerror

kernel32

TlsFree
GlobalReAlloc
GlobalHandle
LocalReAlloc
CompareStringW
GetLocaleInfoW
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GetOEMCP
GetCPInfo
VerSetConditionMask
VerifyVersionInfoA
GetCurrentDirectoryA
SetErrorMode
GetWindowsDirectoryA
GetTempPathA
GetTempFileNameA
SearchPathA
GetProfileIntA
VirtualProtect
FindResourceExW
IsDebuggerPresent
IsProcessorFeaturePresent
ExitProcess
GetModuleHandleExW
AreFileApisANSI
GetSystemTimeAsFileTime
GetSystemInfo
VirtualAlloc
VirtualQuery
GetFileInformationByHandle
GetFileType
PeekNamedPipe
GetCommandLineA
RtlUnwind
SetStdHandle
ExitThread
HeapQueryInformation
IsValidCodePage
GetConsoleCP
GetConsoleMode
GetStdHandle
SetFilePointerEx
GetStartupInfoW
UnhandledExceptionFilter
TerminateProcess
GetStringTypeW
GetTimeZoneInformation
ReadConsoleW
DeleteFileW
GetFileAttributesExW
CreateDirectoryW
QueryPerformanceCounter
GetEnvironmentStringsW
TlsSetValue
GetDriveTypeW
GetDateFormatW
GetTimeFormatW
LCMapStringW
WriteConsoleW
OutputDebugStringW
GetExitCodeProcess
CreateProcessA
GetCurrentDirectoryW
CreateFileW
SetEnvironmentVariableA
GetFileTime
GetFileSizeEx
GetFileAttributesExA
GetFileAttributesA
ResumeThread
SuspendThread
SetThreadPriority
SetEvent
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
GetCurrentThread
lstrcmpA
FindNextFileA
LocalAlloc
TlsAlloc
GetVolumeInformationA
MoveFileA
lstrcmpiA
DuplicateHandle
WriteFile
UnlockFile
SetFilePointer
SetEndOfFile
ReadFile
LockFile
GetFullPathNameA
GetFileSize
FlushFileBuffers
FindFirstFileA
FindClose
DeleteFileA
FileTimeToSystemTime
CreateEventA
CompareStringA
GlobalGetAtomNameA
GlobalFindAtomA
GlobalAddAtomA
lstrcmpW
GlobalDeleteAtom
FreeEnvironmentStringsW
TlsGetValue
LoadLibraryExW
GetSystemDirectoryW
EncodePointer
CopyFileA
FormatMessageA
MulDiv
LocalFree
GlobalSize
FindResourceA
LoadLibraryW
GlobalUnlock
GlobalLock
GetModuleHandleW
GetModuleFileNameW
FreeResource
SetLastError
OutputDebugStringA
lstrcatA
InitializeCriticalSection
DeleteCriticalSection
DecodePointer
HeapSize
GetLastError
RaiseException
InitializeCriticalSectionAndSpinCount
GetProcessHeap
HeapFree
HeapAlloc
HeapReAlloc
LeaveCriticalSection
EnterCriticalSection
ReleaseMutex
WaitForSingleObject
GetModuleHandleA
CreateMutexA
GetThreadLocale
GetVersionExA
SetThreadUILanguage
SetThreadLocale
SetUnhandledExceptionFilter
GetLocalTime
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
CreateFileA
RemoveDirectoryA
CreateDirectoryA
FreeLibrary
GlobalFree
GlobalAlloc
GetProcAddress
LoadLibraryA
lstrcpyA
GetModuleFileNameA
GetThreadUILanguage
MultiByteToWideChar
CreateThread
CloseHandle
Sleep
FindResourceW
LoadResource
LockResource
SizeofResource
WideCharToMultiByte
GetLocaleInfoA
lstrcpynA
GlobalFlags
FileTimeToLocalFileTime
GetACP
GetTickCount

user32

LoadAcceleratorsW
CreateAcceleratorTableA
DestroyAcceleratorTable
SetCursorPos
BringWindowToTop
LockWindowUpdate
SetClassLongA
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
LoadImageW
LoadImageA
CharUpperBuffA
ModifyMenuA
LoadAcceleratorsA
TranslateAcceleratorA
LoadMenuA
InsertMenuItemA
UnpackDDElParam
ReuseDDElParam
CopyIcon
FrameRect
PostThreadMessageA
GetIconInfo
ToAsciiEx
InvertRect
GetDoubleClickTime
IsCharLowerA
MapVirtualKeyExA
DrawMenuBar
DefFrameProcA
DefMDIChildProcA
TranslateMDISysAccel
IsClipboardFormatAvailable
GetUpdateRect
SubtractRect
CreateMenu
DestroyCursor
GetComboBoxInfo
GetWindowRgn
GetKeyboardState
GetKeyboardLayout
DrawIconEx
DrawEdge
RegisterClipboardFormatA
DestroyIcon
GetNextDlgGroupItem
MonitorFromPoint
UnionRect
EnableScrollBar
UpdateLayeredWindow
IsMenu
SetMenuDefaultItem
GetMenuDefaultItem
CreatePopupMenu
NotifyWinEvent
WindowFromPoint
MessageBeep
SetWindowRgn
DeleteMenu
LoadMenuW
GetAsyncKeyState
IsZoomed
TrackMouseEvent
EnumDisplayMonitors
LoadCursorW
SetRectEmpty
SetLayeredWindowAttributes
IsRectEmpty
SetRect
InvalidateRgn
CopyAcceleratorTableA
ReleaseCapture
SetCapture
IntersectRect
CopyImage
LoadCursorA
GetSysColorBrush
RealChildWindowFromPoint
SystemParametersInfoA
InflateRect
GetMenuItemInfoA
DestroyMenu
SetCursor
ShowOwnedPopups
GetMessageA
MapDialogRect
SetWindowContextHelpId
KillTimer
SetTimer
WaitMessage
PostQuitMessage
CharUpperA
GetCursorPos
GetWindowThreadProcessId
MapVirtualKeyA
GetKeyNameTextA
DrawStateA
OffsetRect
CharNextA
FillRect
ClientToScreen
EndPaint
BeginPaint
ReleaseDC
GetWindowDC
GetDC
TabbedTextOutA
GrayStringA
DrawTextExA
LoadBitmapW
SetMenuItemInfoA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
IsDialogMessageA
SetWindowTextA
SendDlgItemMessageA
CheckDlgButton
SetDlgItemTextA
GetDlgItemInt
MoveWindow
ShowWindow
GetMonitorInfoA
MonitorFromWindow
WinHelpA
GetScrollInfo
SetScrollInfo
LoadIconA
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
GetTopWindow
GetClassNameA
GetClassLongA
EqualRect
MapWindowPoints
ScreenToClient
MessageBoxA
AdjustWindowRectEx
RemovePropA
GetPropA
SetPropA
ShowScrollBar
GetScrollRange
SetScrollRange
ScrollWindow
RedrawWindow
ValidateRect
SetForegroundWindow
GetForegroundWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
GetKeyState
GetFocus
GetDlgCtrlID
IsWindowVisible
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
SetWindowPos
IsChild
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
DefWindowProcA
GetMessageTime
GetMessagePos
RegisterWindowMessageA
GetWindowTextLengthA
GetWindowTextA
GetScrollPos
SetScrollPos
SetFocus
RemoveMenu
InsertMenuA
GetMenuItemCount
GetMenuItemID
GetSubMenu
GetMenuState
GetMenuStringA
SetActiveWindow
IsWindowEnabled
GetActiveWindow
GetNextDlgTabItem
GetDlgItem
EndDialog
CreateDialogIndirectParamA
DestroyWindow
IsWindow
wsprintfA
UpdateWindow
UnregisterClassA
ShowCaret
SetParent
GetDesktopWindow
DrawIcon
GetSystemMetrics
IsIconic
AppendMenuA
GetSystemMenu
LoadIconW
DispatchMessageA
TranslateMessage
PeekMessageA
GetWindow
GetWindowRect
PostMessageA
DrawFocusRect
DrawTextA
DrawFrameControl
GetSysColor
CopyRect
SetWindowLongA
PtInRect
GetClientRect
GetWindowLongA
GetParent
InvalidateRect
CallWindowProcA
EnableWindow
MessageBoxExA
SendMessageA
GetLastActivePopup
HideCaret

gdi32

DeleteObject
Escape
ExcludeClipRect
GetClipBox
GetObjectType
GetPixel
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectObject
SelectPalette
SetBkMode
SetMapMode
PatBlt
GetTextExtentPoint32A
CombineRgn
GetMapMode
SetRectRgn
DPtoLP
GetRgnBox
CreateCompatibleBitmap
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
CreateRoundRectRgn
CreateDIBSection
CreateEllipticRgn
Ellipse
CreatePolygonRgn
Polygon
Polyline
OffsetWindowOrgEx
RealizePalette
SetPixel
StretchBlt
SetDIBColorTable
OffsetRgn
Rectangle
CreatePalette
CreateSolidBrush
GetPaletteEntries
GetSystemPaletteEntries
RoundRect
ExtFloodFill
SetPaletteEntries
EnumFontFamiliesExA
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
GetWindowOrgEx
LPtoDP
GetViewportOrgEx
SetPixelV
GetTextFaceA
OffsetViewportOrgEx
SetWindowOrgEx
SetWindowExtEx
SetViewportOrgEx
SetViewportExtEx
CreateRectRgn
CreatePatternBrush
CreatePen
CreateHatchBrush
CreateCompatibleDC
BitBlt
CreateBitmap
GetDeviceCaps
CreateDCA
CopyMetaFileA
DeleteDC
CreateFontIndirectA
GetStockObject
GetObjectA
ExtTextOutA
SetTextColor
CreateRectRgnIndirect
GetTextColor
GetBkColor
ScaleWindowExtEx
SetBkColor
TextOutA
MoveToEx
GetNearestPaletteIndex
GetTextMetricsA
SetTextAlign
SetROP2
SetPolyFillMode
GetLayout
SetLayout
ScaleViewportExtEx

msimg32

AlphaBlend
TransparentBlt

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegCreateKeyExA
RegEnumKeyExA
RegEnumValueA
RegQueryValueA
RegEnumKeyA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
CryptAcquireContextA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
CryptGetHashParam
CryptDestroyHash
CryptHashData
CryptReleaseContext
CryptCreateHash

shell32

DragFinish
SHGetPathFromIDListA
ShellExecuteA
SHGetFileInfoA
SHGetMalloc
SHGetSpecialFolderLocation
SHGetDesktopFolder
SHAppBarMessage
SHBrowseForFolderA
DragQueryFileA

comctl32

InitCommonControlsEx

shlwapi

StrToIntA
PathIsDirectoryA
PathFileExistsA
PathIsUNCA
PathStripToRootA
PathFindExtensionA
PathFindFileNameA
StrFormatKBSizeA
PathRemoveFileSpecW

uxtheme

GetThemePartSize
IsThemeBackgroundPartiallyTransparent
IsAppThemed
DrawThemeText
DrawThemeParentBackground
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemeColor
GetCurrentThemeName
GetThemeSysColor
GetWindowTheme

ole32

CoTaskMemFree
OleDuplicateData
ReleaseStgMedium
CoUninitialize
CoTaskMemAlloc
CLSIDFromString
CLSIDFromProgID
CoCreateInstance
CoInitialize
CoInitializeEx
CoDisconnectObject
CoGetClassObject
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CreateILockBytesOnHGlobal
CoFreeUnusedLibraries
CoCreateGuid
OleInitialize
OleUninitialize
OleFlushClipboard
OleIsCurrentClipboard
DoDragDrop
CreateStreamOnHGlobal
CoRevokeClassObject
CoRegisterMessageFilter
OleLockRunning
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor

oleaut32

SystemTimeToVariantTime
VarDateFromStr
SysFreeString
SysAllocStringByteLen
SysAllocStringLen
VariantInit
VariantClear
VariantChangeType
SysStringLen
SafeArrayDestroy
SysAllocString
OleCreateFontIndirect
LoadTypeLi
VariantTimeToSystemTime
VarBstrFromDate
VariantCopy

oledlg

ord8

gdiplus

GdipDisposeImage
GdipCreateBitmapFromHBITMAP
GdipCreateFromHDC
GdipDeleteGraphics
GdipSetInterpolationMode
GdipDrawImageRectI
GdipGetImageGraphicsContext
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePalette
GdipCloneImage
GdipCreateBitmapFromStream
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipDrawImageI
GdipAlloc
GdiplusShutdown
GdiplusStartup
GdipGetImagePaletteSize
GdipFree

ws2_32

socket
htons
WSAStartup
recv
inet_ntoa
setsockopt
closesocket
ioctlsocket
connect
send
inet_addr
WSAIoctl
select
WSAAsyncSelect
sendto
gethostbyname
WSAGetLastError
WSACreateEvent
WSAEventSelect
WSACloseEvent
accept
htonl
__WSAFDIsSet
WSACleanup
WSASetLastError
bind
recvfrom

iphlpapi

GetAdaptersInfo

libmov

?open_mov_handle@@YAHPAD@Z
?close_mov_handle@@YAHH@Z
?write_mov@@YAHHPADH@Z

oleacc

AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject

wininet

InternetOpenA
InternetCloseHandle
InternetConnectA
InternetFindNextFileA
InternetSetOptionExA
InternetGetLastResponseInfoA
InternetSetStatusCallback
FtpFindFirstFileA
FtpGetFileA
FtpPutFileA
FtpDeleteFileA
FtpSetCurrentDirectoryA
FtpGetCurrentDirectoryA

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

winmm

PlaySoundA

Exports

Exports

??4bygk_core@@QAEAAV0@ABV0@@Z
?__autoclassinit2@bygk_core@@QAEXI@Z

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 378KB - Virtual size: 378KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 139KB - Virtual size: 139KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0b68aacb8b501446fbc44d109c743007

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

bygk_core

avcodec-58

avformat-58

avutil-56

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

oledlg

gdiplus

ws2_32

iphlpapi

libmov

oleacc

wininet

imm32

winmm

Exports

Exports

Sections

.text Size: 1.7MB - Virtual size: 1.7MB

.rdata Size: 378KB - Virtual size: 378KB

.data Size: 28KB - Virtual size: 1.2MB

.rsrc Size: 1.4MB - Virtual size: 1.4MB

.reloc Size: 139KB - Virtual size: 139KB

.text
Size: 1.7MB - Virtual size: 1.7MB

.rdata
Size: 378KB - Virtual size: 378KB

.data
Size: 28KB - Virtual size: 1.2MB

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

.reloc
Size: 139KB - Virtual size: 139KB