550de55abcde0a271e426ab9bb363107a08fe1d8517c15fdae76200153dccc72

Sharing

Copy URL Twitter E-mail

General

Target

550de55abcde0a271e426ab9bb363107a08fe1d8517c15fdae76200153dccc72
Size

752KB
MD5

0c5de5776b405c15b40fc22cae3a5dc3
SHA1

d7509a02a290cc38494bbd3d205e03d0adee6d12
SHA256

550de55abcde0a271e426ab9bb363107a08fe1d8517c15fdae76200153dccc72
SHA512

d8d0b567a053190db29e2927fb816c36d799e1fa7ceda6aee10990a4b3153daaa0a603379fca3bd6b04bacc5dcaaaa92e7096673b000ab1f3d3d9dbc716f871e
SSDEEP

12288:olI3t2Lyj/Ux5wlTcO3AMuIRVRD4sPKXW0F+52ULuJemuH39csH2wCW4UVZX:F3cLsUx5wph9uIRVR9KXnFiL2uXBHqWV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
550de55abcde0a271e426ab9bb363107a08fe1d8517c15fdae76200153dccc72

Files

550de55abcde0a271e426ab9bb363107a08fe1d8517c15fdae76200153dccc72
.exe windows:6 windows x86 arch:x86

a9183cabbff6804056c22b4382aabec8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\workspace\StellarPlayer_Windows_Release\app\miniblink\release\Miniblink.pdb

Imports

shell32

ShellExecuteA

kernel32

GetModuleFileNameW
CreateMutexA
GetFileAttributesW
MultiByteToWideChar
Sleep
GetLastError
LockResource
GlobalAlloc
GlobalFree
CloseHandle
LoadLibraryW
LoadResource
FindResourceW
GetProcAddress
GlobalLock
GetModuleHandleW
WideCharToMultiByte
ReadFile
SetLastError
WriteFile
CreateFileW
GetCurrentThreadId
VirtualProtect
VirtualFree
VirtualAlloc
GetVersionExW
GetModuleHandleA
GetThreadTimes
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
OutputDebugStringA
GetLogicalProcessorInformation
GetThreadPriority
SetThreadPriority
SwitchToThread
SignalObjectAndWait
SetEvent
CreateTimerQueue
DecodePointer
WriteConsoleW
HeapSize
FlushFileBuffers
GetConsoleCP
SetStdHandle
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetOEMCP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
HeapReAlloc
GetStringTypeW
ReadConsoleW
GetConsoleMode
SetFilePointerEx
SizeofResource
ReleaseSemaphore
InterlockedPopEntrySList
QueryDepthSList
UnregisterWaitEx
CreateTimerQueueTimer
QueryPerformanceCounter
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
DeleteCriticalSection
DuplicateHandle
WaitForSingleObjectEx
GetCurrentThread
InitializeCriticalSectionAndSpinCount
CreateEventW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetTickCount
EncodePointer
RaiseException
InterlockedPushEntrySList
InterlockedFlushSList
RtlUnwind
FreeLibrary
LoadLibraryExW
GetCommandLineA
GetCommandLineW
ExitProcess
GetModuleHandleExW
GetStdHandle
GetACP
HeapAlloc
HeapFree
CreateThread
ExitThread
FreeLibraryAndExitThread
GetFileType
LCMapStringW

user32

EnumDisplayMonitors
GetMonitorInfoW
GetWindowLongW
GetWindowThreadProcessId
DefWindowProcW
FindWindowExW
GetWindowRect
GetFocus
GetDC
GetPropW
CreateWindowExW
SendMessageW
RemovePropW
SetWindowTextW
ShowWindow
SetTimer
RegisterClassW
MessageBoxA
MoveWindow
IntersectRect
SetFocus
SetPropW
SetCapture
SetWindowLongW
GetClientRect
UpdateLayeredWindow
ReleaseCapture
InvalidateRect
ReleaseDC
BeginPaint
EndPaint
ScreenToClient

gdi32

BitBlt
CreateCompatibleBitmap
SelectObject
CreateCompatibleDC
DeleteDC
SetBitmapBits
GetObjectW
DeleteObject
GetCurrentObject

Sections

.text
Size: 435KB - Virtual size: 434KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 91KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 10KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 33B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 94KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 91KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a9183cabbff6804056c22b4382aabec8

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

shell32

kernel32

user32

gdi32

Sections

.text Size: 435KB - Virtual size: 434KB

.rdata Size: 91KB - Virtual size: 91KB

.data Size: 10KB - Virtual size: 14KB

.gfids Size: 3KB - Virtual size: 2KB

.tls Size: 512B - Virtual size: 33B

.rsrc Size: 94KB - Virtual size: 93KB

.reloc Size: 91KB - Virtual size: 92KB

.text
Size: 435KB - Virtual size: 434KB

.rdata
Size: 91KB - Virtual size: 91KB

.data
Size: 10KB - Virtual size: 14KB

.gfids
Size: 3KB - Virtual size: 2KB

.tls
Size: 512B - Virtual size: 33B

.rsrc
Size: 94KB - Virtual size: 93KB

.reloc
Size: 91KB - Virtual size: 92KB