aabda32f5709fcec70afce0d620511b91914e7d9083fffbd934a209d5f6406c1

Sharing

Copy URL

Twitter E-mail

General

Target

aabda32f5709fcec70afce0d620511b91914e7d9083fffbd934a209d5f6406c1
Size

816KB
MD5

bbff664c7ba2a1c20de0905d27a3092b
SHA1

4b9477d41038c62b217c7bb2fa2691a2495294e0
SHA256

aabda32f5709fcec70afce0d620511b91914e7d9083fffbd934a209d5f6406c1
SHA512

33f8ab5689d5090a0fd5a6f21fa99f2852677d0ce20775998d8f7862889a25242e7c1f44302ad9ee4c634f0336b84c81ca055e02b157d91dbad71a04c6d0bcb5
SSDEEP

24576:QGRVdp5K3IT3HiJdGudrF+Csm/efBI8TN6PkUMPuNQd:3Vdp83IjHwZF+JFBX8PkUMPued

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aabda32f5709fcec70afce0d620511b91914e7d9083fffbd934a209d5f6406c1

Files

aabda32f5709fcec70afce0d620511b91914e7d9083fffbd934a209d5f6406c1
.exe windows:4 windows x86 arch:x86

27cb9f88d4d8db8b5135cc00e214a04f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\jk_9\workspace\CBB_DH3.4303_Player-lite_package\code_path\Main\Release\Win32\X Player.pdb

Imports

sf_uibase_r

?UnAssociateFiletoApp@CSFUIFactory@@SAHPB_W@Z
?CreateUIComboBox@CSFUIFactory@@SAPAVCSFComboBox@@PAVISFComboBoxEvent@@@Z
?DestroyUIEditCtrl@CSFUIFactory@@SAXPAVCSFEditCtrl@@@Z
?DestroyUIComboBox@CSFUIFactory@@SAXPAVCSFComboBox@@@Z
??_7ISFComboBoxEvent@@6B@
?CreateUIListCtrl@CSFUIFactory@@SAPAVCSFListCtrl@@PAVISFListCtrlEvent@@@Z
?DestroyUIListCtrl@CSFUIFactory@@SAXPAVCSFListCtrl@@@Z
?CreateUIEditCtrl@CSFUIFactory@@SAPAVCSFEditCtrl@@PAVISFEditCtrlEvent@@@Z
?EDIT_OnTextChange@ISFEditCtrlEvent@@UAEXIPA_W@Z
?EDIT_OnEditingFinished@ISFEditCtrlEvent@@UAEXIPA_W@Z
??_7ISFEditCtrlEvent@@6B@
?GetDesktopRect@CSFUIFactory@@SAXAAUtagRECT@@@Z
?PtInRect@CSFRect@@QBEHUtagPOINT@@@Z
?CreateFileDialog@CSFUIFactory@@SAHPAUFilePathInfo@@PA_WHHPAUSelectFolderUI@@PB_W3K3PAX@Z
?DeflateRect@CSFRect@@QAEXHH@Z
?CreateUIPlayProgressPanel@CSFUIFactory@@SAPAVCSFPlayProgressPanel@@PAVIPlayProgressEvent@@@Z
?DestroyUIPlayProgressPanel@CSFUIFactory@@SAXPAVCSFPlayProgressPanel@@@Z
?OnMouseOverChannel@IPlayProgressEvent@@UAEXIHUtagPOINT@@H@Z
?PPP_OnMouseLeave@IPlayProgressEvent@@UAEXI@Z
?UIPostMessage@CSFUIFactory@@SAXPAXH0@Z
?CreateUIMainWindow@CSFUIFactory@@SAPAVCSFDialog@@PAVISFDialogEvent@@PAX@Z
?DestroyUIMainWindow@CSFUIFactory@@SAXPAVCSFDialog@@@Z
?Quit@CSFUIFactory@@SAXXZ
?SetResourcePath@CSFUIFactory@@SAXPB_W@Z
?UnInstall@CSFUIFactory@@SAXXZ
?Install@CSFUIFactory@@SAXXZ
?AssociateFiletoApp@CSFUIFactory@@SAHPB_W0H@Z
?IsFileAssociatetoApp@CSFUIFactory@@SAHPB_W@Z
?MainLoop@CSFUIFactory@@SAHXZ
?SetFontProperty@CSFUIFactory@@SAXHAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?OnItemClick@ISFTreeCtrlEvent@@UAEHPAXI@Z
?OnItemCheckBoxClick@ISFTreeCtrlEvent@@UAEXPAXI@Z
??_7ISFViewEvent@@6B@
??_7ISFTreeCtrlEvent@@6B@
??1ISFViewEvent@@UAE@XZ
?OnShowWindow@ISFViewEvent@@UAEXH@Z
?OnLButtonDown@ISFViewEvent@@UAEXIUtagPOINT@@@Z
?OnLButtonDblClk@ISFViewEvent@@UAEXIUtagPOINT@@@Z
?CreateUITreeCtrl@CSFUIFactory@@SAPAVCSFTreeCtrl@@PAVISFTreeCtrlEvent@@@Z
?CreateUIView@CSFUIFactory@@SAPAVCSFView@@PAVISFViewEvent@@@Z
?DestroyUITreeCtrl@CSFUIFactory@@SAXPAVCSFTreeCtrl@@@Z
?SetRect@CSFRect@@QAEXHHHH@Z
?DestroyUIView@CSFUIFactory@@SAXPAVCSFView@@@Z
?GetUIWnd@ISFViewEvent@@QAEPAXXZ
?BTN_OnLButtonDown@ISFButtonEvent@@UAEXHIUtagPOINT@@@Z
??_7ISFSliderCtrlEvent@@6B@
?BTN_OnLButtonUp@ISFButtonEvent@@UAEXHIUtagPOINT@@@Z
?CreateUISliderCtrl@CSFUIFactory@@SAPAVCSFSliderCtrl@@PAVISFSliderCtrlEvent@@@Z
?DestroyUISliderCtrl@CSFUIFactory@@SAXPAVCSFSliderCtrl@@@Z
?OnPaintFailed@ISFVideoWindowEvent@@UAEXH@Z
?CreateUIRadioBox@CSFUIFactory@@SAPAVCSFRadioBox@@PAVISFRadioBoxEvent@@@Z
?CreateUIVideoWindow@CSFUIFactory@@SAPAVCSFVideoWindow@@W4VIDEOWINDOWMODE@@PAVISFVideoWindowEvent@@HH@Z
?CreateUINumSpiner@CSFUIFactory@@SAPAVCSFNumSpiner@@PAVISFNumSpinerEvent@@@Z
?GetDefaultLayout@CSFVideoWindow@@SAPB_WW4LAYOUT_TYPE@@@Z
?DestroyUIRadioBox@CSFUIFactory@@SAXPAVCSFRadioBox@@@Z
?DestroyUIVideoWindow@CSFUIFactory@@SAXPAVCSFVideoWindow@@@Z
??_7ISFNumSpinerEvent@@6B@
?DestroyUINumSpiner@CSFUIFactory@@SAXPAVCSFNumSpiner@@@Z
??1ISFVideoWindowEvent@@UAE@XZ
?OnCreate@ISFVideoWindowEvent@@UAEHXZ
?OnDestroy@ISFVideoWindowEvent@@UAEXXZ
?OnSize@ISFVideoWindowEvent@@UAEXIHH@Z
?OnBnClickedVideoClose@ISFVideoWindowEvent@@UAEXHH@Z
?OnBnClickedVideoSnap@ISFVideoWindowEvent@@UAEXHH@Z
?OnBnClickedVideoRecord@ISFVideoWindowEvent@@UAEXHHH@Z
?OnBnClickedVideoProperty@ISFVideoWindowEvent@@UAEXHH@Z
?BTN_OnMouseMove@ISFButtonEvent@@UAEXHIUtagPOINT@@@Z
??_7ISFRadioBoxEvent@@6B@
?OnFocusWndChanged@ISFVideoWindowEvent@@UAEXHH@Z
??_7ISFVideoWindowEvent@@6B@
?OnSubWinZoom@ISFVideoWindowEvent@@UAEXHHH@Z
?BTN_OnMouseLeave@ISFButtonEvent@@UAEXHIJ@Z
?OnSubWndExchanged@ISFVideoWindowEvent@@UAEXHH@Z
?OnSubWinOccupyRoom@ISFVideoWindowEvent@@UAEXHHH@Z
?RADIO_OnShowWindow@ISFRadioBoxEvent@@UAEXHIH@Z
?VideoWidow_OnLButtonDown@ISFVideoWindowEvent@@UAEXHHAAUtagPOINT@@@Z
?VideoWidow_OnLButtonUp@ISFVideoWindowEvent@@UAEXHHAAUtagPOINT@@@Z
?BTN_OnCustomerClicked@ISFButtonEvent@@UAEXXZ
?OnDlgKeyDown@ISFDialogEvent@@UAEXII@Z
?OnDlgNcActivate@ISFDialogEvent@@UAEXH@Z
?CreateUIDialog@CSFUIFactory@@SAPAVCSFDialog@@PAVISFDialogEvent@@PAX@Z
?OnDlgFileDrop@ISFDialogEvent@@UAEXPB_W@Z
?CreateUIButton@CSFUIFactory@@SAPAVCSFButton@@PAVISFButtonEvent@@@Z
??_7CSFEventBase@@6B@
?OnDlgMouseLeave@ISFDialogEvent@@UAEXXZ
?CreateUIStatic@CSFUIFactory@@SAPAVCSFStatic@@PAVISFStaticEvent@@@Z
?CreateUIPictureCtrl@CSFUIFactory@@SAPAVCSFPictureCtrl@@PAVISFPictureCtrlEvent@@@Z
?OnDlgMouseHover@ISFDialogEvent@@UAEXXZ
?DestroyUIDialog@CSFUIFactory@@SAXPAVCSFDialog@@@Z
?OnDlgShowWindow@ISFDialogEvent@@UAEXHI@Z
?DestroyUIButton@CSFUIFactory@@SAXPAVCSFButton@@@Z
?OffsetRect@CSFRect@@QAEXHH@Z
?DestroyUIStatic@CSFUIFactory@@SAXPAVCSFStatic@@@Z
?OnDlgTimer@ISFDialogEvent@@UAEXI@Z
?DestroyUIPictureCtrl@CSFUIFactory@@SAXPAVCSFPictureCtrl@@@Z
?OnMsgScreenLock@ISFDialogEvent@@UAEXH@Z
?GetCurrentPath@CSFUIFactory@@SAPA_WXZ
??_7ISFButtonEvent@@6B@
?OnDisplayChange@ISFDialogEvent@@UAEXHHH@Z
?MoveToXY@CSFRect@@QAEXHH@Z
?BTN_OnClicked@ISFButtonEvent@@UAEXH@Z
??1ISFDialogEvent@@UAE@XZ
?OnDlgSize@ISFDialogEvent@@UAEXIAAH0@Z
?GetUIWnd@ISFDialogEvent@@QAEPAXXZ
?Dlg_OnOK@ISFDialogEvent@@UAEXXZ
??_7ISFDialogEvent@@6B@
?Dlg_OnCancel@ISFDialogEvent@@UAEXXZ
?OnKeyEscapeClicked@ISFDialogEvent@@UAEXXZ
?Dlg_Close@ISFDialogEvent@@UAEHXZ

playmodule

?GroupPlay_PlayForward@CPlayModule@PLAY_MODULE@@QAEHXZ
?GroupPlay_DelFromPlayGroup@CPlayModule@PLAY_MODULE@@QAEHPAV12@@Z
?GroupPlay_AddToPlayGroup@CPlayModule@PLAY_MODULE@@QAEHPAV12@@Z
?GroupPlay_Open@CPlayModule@PLAY_MODULE@@QAEHXZ
??1CPlayModule@PLAY_MODULE@@UAE@XZ
??0CPlayModule@PLAY_MODULE@@QAE@PAVIPlayModuleListener@1@@Z
?GroupPlay_Close@CPlayModule@PLAY_MODULE@@QAEHXZ
?GroupPlay_QueryGroupPlayingTime@CPlayModule@PLAY_MODULE@@QAEHPAU__DATETIME_INFO@@@Z
?GroupPlay_Seek@CPlayModule@PLAY_MODULE@@QAEHI@Z
?GroupPlay_Resume@CPlayModule@PLAY_MODULE@@QAEHXZ
?GroupPlay_Pause@CPlayModule@PLAY_MODULE@@QAEHXZ
?GroupPlay_SetPlaySpeed@CPlayModule@PLAY_MODULE@@QAEHM@Z
?GetTimePicture@CPlayModule@PLAY_MODULE@@QAEHPAD@Z
?Seek@CPlayModule@PLAY_MODULE@@QAEHM@Z
?Resume@CPlayModule@PLAY_MODULE@@QAEHXZ
?ChooseSoundChannel@CPlayModule@PLAY_MODULE@@QAEHK@Z
?Pause@CPlayModule@PLAY_MODULE@@QAEHXZ
?StopDataRecord@CPlayModule@PLAY_MODULE@@QAEHXZ
?Close@CPlayModule@PLAY_MODULE@@QAEHXZ
?StartDataRecord@CPlayModule@PLAY_MODULE@@QAEHPADH@Z
?Stop@CPlayModule@PLAY_MODULE@@QAEHXZ
?SetRotateAngle@CPlayModule@PLAY_MODULE@@QAEHH@Z
?Play@CPlayModule@PLAY_MODULE@@QAEHPAX@Z
?Open@CPlayModule@PLAY_MODULE@@QAEHPAD0@Z
?SetRefValue@CPlayModule@PLAY_MODULE@@QAEHPAEI@Z
?GetRefValue@CPlayModule@PLAY_MODULE@@QAEHPAEPAI@Z
?CloseIVSTrack@CPlayModule@PLAY_MODULE@@QAEHXZ
?OpenIVSTrack@CPlayModule@PLAY_MODULE@@QAEHXZ
?StepBackward@CPlayModule@PLAY_MODULE@@QAEHXZ
?StepForward@CPlayModule@PLAY_MODULE@@QAEHXZ
?GetCurrentPlayTime@CPlayModule@PLAY_MODULE@@QAEIXZ
?SetColor@CPlayModule@PLAY_MODULE@@QAEHHHHH@Z
?RenderLastFrame@CPlayModule@PLAY_MODULE@@QAEHXZ
?GetFileEndTime@CPlayModule@PLAY_MODULE@@QAEIXZ
?GetCurrentVideoFrameRate@CPlayModule@PLAY_MODULE@@QAEIXZ
??_7IPlayModuleListener@PLAY_MODULE@@6B@
?QueryInfo@CPlayModule@PLAY_MODULE@@QAEHHPADHPAH@Z
?GetMediaInfo@CPlayModule@PLAY_MODULE@@QAEHPAUMEDIA_INFO@@@Z
?IsPlaying@CPlayModule@PLAY_MODULE@@QAEHXZ
?PlayBackward@CPlayModule@PLAY_MODULE@@QAEHXZ
?GetCurrentPlayingVideoFrameHeight@CPlayModule@PLAY_MODULE@@QAEIXZ
?PlayForward@CPlayModule@PLAY_MODULE@@QAEHXZ
?SetCurrentPlayingVideoFrameHeight@CPlayModule@PLAY_MODULE@@QAEXI@Z
?SnapPicture@CPlayModule@PLAY_MODULE@@QAEHPADW4PM_IMAGE_TYPE@@@Z
?GetCurrentPlayingVideoFrameWidth@CPlayModule@PLAY_MODULE@@QAEIXZ
?AdjustWaveAudio@CPlayModule@PLAY_MODULE@@QAEHH@Z
??1IPlayModuleListener@PLAY_MODULE@@UAE@XZ
?SetCurrentPlayingVideoFrameWidth@CPlayModule@PLAY_MODULE@@QAEXI@Z
?IsGetFileTimeInfo@CPlayModule@PLAY_MODULE@@QAEHXZ
?CloseAudio@CPlayModule@PLAY_MODULE@@QAEHXZ
?SetFileTimeInfo@CPlayModule@PLAY_MODULE@@QAEXII@Z
?OpenAudio@CPlayModule@PLAY_MODULE@@QAEHXZ
?SetSpeed@CPlayModule@PLAY_MODULE@@QAEHM@Z
?GetFilePlayedTime@CPlayModule@PLAY_MODULE@@QAEIXZ
?Seek@CPlayModule@PLAY_MODULE@@QAEHIH@Z
??1IAVIConvertListener@PLAY_MODULE@@UAE@XZ
?Stop@CPlaySdkWrapper@PLAY_MODULE@@QAEHXZ
?SetAVIConvertListener@CPlaySdkWrapper@PLAY_MODULE@@QAEHPAVIAVIConvertListener@2@@Z
?InputData@CPlaySdkWrapper@PLAY_MODULE@@QAEHPAEK@Z
?CloseStream@CPlaySdkWrapper@PLAY_MODULE@@QAEHXZ
?GetBufferValue@CPlaySdkWrapper@PLAY_MODULE@@QAEKK@Z
??_7IAVIConvertListener@PLAY_MODULE@@6B@
?GetSourceBufferRemain@CPlaySdkWrapper@PLAY_MODULE@@QAEKXZ
?StopAVIConvert@CPlaySdkWrapper@PLAY_MODULE@@QAEHXZ
??0CPlaySdkWrapper@PLAY_MODULE@@QAE@XZ
??1CPlaySdkWrapper@PLAY_MODULE@@UAE@XZ
?GroupPlay_PlayBackward@CPlayModule@PLAY_MODULE@@QAEHXZ
?GetFileStartTime@CPlayModule@PLAY_MODULE@@QAEIXZ

ivsdrawer

??AValue@Json@@QAEAAV01@I@Z
??AValue@Json@@QAEAAV01@PBD@Z
?size@Value@Json@@QBEIXZ
?asInt@Value@Json@@QBEHXZ
?asString@Value@Json@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
??4Value@Json@@QAEAAV01@ABV01@@Z
ord10
??1Value@Json@@QAE@XZ
?toStyledString@Value@Json@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?parse@Reader@Json@@QAE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAVValue@2@_N@Z
??0Reader@Json@@QAE@XZ
ord1
ord6
ord4
ord11
ord23
ord27
ord2
??0Value@Json@@QAE@W4ValueType@1@@Z
ord9

kernel32

GetCPInfo
GetStartupInfoA
GetFileType
SetHandleCount
HeapSize
InterlockedDecrement
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleHandleA
GetStdHandle
RaiseException
RtlUnwind
GetDriveTypeA
FileTimeToLocalFileTime
FileTimeToSystemTime
GetSystemTimeAsFileTime
GetProcessHeap
HeapAlloc
GetVersionExA
HeapFree
GetCommandLineA
GetFileAttributesA
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
FlushFileBuffers
GetStringTypeA
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
GetStringTypeW
GetUserDefaultLCID
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileW
SetEndOfFile
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetStringTypeExA
LCMapStringW
ResetEvent
SetEvent
CreateEventA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
SetFilePointer
ReadFile
WriteFile
GetDiskFreeSpaceExA
GetCurrentDirectoryA
FindFirstFileA
DeleteFileA
CreateDirectoryA
CreateThread
MultiByteToWideChar
WideCharToMultiByte
GetTickCount
OutputDebugStringW
FindNextFileW
SetLastError
FindFirstFileW
FindClose
ExitProcess
CloseHandle
GetCurrentThreadId
GetModuleFileNameA
LoadLibraryA
GetCurrentProcess
SetUnhandledExceptionFilter
SetErrorMode
CreateFileA
GetProcAddress
LoadLibraryW
FreeLibrary
QueryPerformanceCounter
QueryPerformanceFrequency
WaitForSingleObject
GetModuleHandleW
Sleep
GetFileAttributesW
GetModuleFileNameW
GetCurrentProcessId
CreateMutexW
GetLastError
OutputDebugStringA
GetConsoleCP
GetConsoleMode
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
GetTimeZoneInformation
GetFullPathNameA
VirtualAlloc
HeapReAlloc
GetLocaleInfoA
InterlockedExchange
InterlockedCompareExchange
SetStdHandle

user32

GetSystemMetrics
MessageBoxW
SetTimer
KillTimer
DefWindowProcW
DestroyWindow
RegisterClassExW
UnregisterClassW
CreateWindowExW
PostMessageW
EnumWindows
GetWindowTextW
GetWindowLongW
GetWindowThreadProcessId
MessageBoxExW
SendMessageW
LoadStringA

advapi32

CryptGenRandom
CryptAcquireContextW
CryptReleaseContext

shell32

ShellExecuteA

Sections

.text
Size: 608KB - Virtual size: 607KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 132KB - Virtual size: 130KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

27cb9f88d4d8db8b5135cc00e214a04f

Headers

File Characteristics

PDB Paths

Imports

sf_uibase_r

playmodule

ivsdrawer

kernel32

user32

advapi32

shell32

Sections

.text Size: 608KB - Virtual size: 607KB

.rdata Size: 132KB - Virtual size: 130KB

.data Size: 52KB - Virtual size: 71KB

.rsrc Size: 20KB - Virtual size: 17KB

.text
Size: 608KB - Virtual size: 607KB

.rdata
Size: 132KB - Virtual size: 130KB

.data
Size: 52KB - Virtual size: 71KB

.rsrc
Size: 20KB - Virtual size: 17KB