General

  • Target

    CMSSetup_1.0.0.54.exe

  • Size

    9.8MB

  • MD5

    2671218c049621ef4ff8c4b5d9676185

  • SHA1

    346227900d7f985c911bd2c32320d823307f04f4

  • SHA256

    bd1b02ce03c799dfe234fa3a57108a0908e5dc077ee5de297c8e8387fc859ced

  • SHA512

    bf771c9c5cd8e3c99e09426bdb54eefdc29dcccb79a993947a69a9938ab78e6cbf62e1b7632c108539f8e482a1d93692e0c4948473b8c1642d567f07562d0bad

  • SSDEEP

    196608:fVYSpP9l3c7XjF1zQDL2pnjx3ImmqjLpOtmM6P7RAxtrivQ6LbyYUBriLJg:3pP9lM7Xp1zV1ImmqHpOtSP7RKio0yYI

Score
3/10

Malware Config

Signatures

  • Unsigned PE 30 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 4 IoCs

Files

  • CMSSetup_1.0.0.54.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/FindProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    8df26927f8978d4eb40ff179c0aa961b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    153027ec3b10bcea606b777657dd3402


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    9b6b6a7858e17fb0b17e1c1428330343


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    a648aeaa164b592c1e8892a10400b5ae


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • Buzzer/buzzer1.wav
  • Buzzer/buzzer2.wav
  • Buzzer/buzzer3.wav
  • CMSClient.exe
    .exe windows:5 windows x86 arch:x86

    c86c9954b9948a8264616c143242e3da


    Headers

    Imports

    Exports

    Sections

  • CMSClient.xml
    .xml
  • EncryptGW.dll
    .dll windows:5 windows x86 arch:x86

    c9c9f9540aaca25cd063cea8d2a80f52


    Headers

    Imports

    Exports

    Sections

  • FEPlayer.dll
    .dll windows:5 windows x86 arch:x86

    0156052dc7001e5913e0b21d580eba74


    Headers

    Imports

    Exports

    Sections

  • Image/Batch_Download_Button.png
    .png
  • Image/FastForward.png
    .png
  • Image/ImageList.bmp
  • Image/Logo.png
    .png
  • Image/MainToolBar_btnAbout.png
    .png
  • Image/MainToolBar_btnClose.png
    .png
  • Image/MainToolBar_btnLocalPlay.png
    .png
  • Image/MainToolBar_btnLock.png
    .png
  • Image/MainToolBar_btnLog.png
    .png
  • Image/MainToolBar_btnMin.png
    .png
  • Image/MainToolBar_btnPreview.png
    .png
  • Image/MainToolBar_btnRestore.png
    .png
  • Image/MainToolBar_btnSet.png
    .png
  • Image/MenuBK.bmp
  • Image/MenuCheck.bmp
  • Image/Mute.png
    .png
  • Image/PTZ_BACK.png
    .png
  • Image/PTZ_BTN_D.png
    .png
  • Image/PTZ_BTN_L.png
    .png
  • Image/PTZ_BTN_R.png
    .png
  • Image/PTZ_BTN_U.png
    .png
  • Image/PlayBack_Search.png
    .png
  • Image/PlayBack_toolbar_Openfile.png
    .png
  • Image/PlayBack_toolbar_Play.png
    .png
  • Image/PlayBack_toolbar_Stop.png
    .png
  • Image/PlayBack_toolbar_backup.png
    .png
  • Image/Preview_Alarm.png
    .png
  • Image/Preview_Close.png
    .png
  • Image/Preview_FishEye_DisplayMode_1.png
    .png
  • Image/Preview_FishEye_DisplayMode_4.png
    .png
  • Image/Preview_SelectWindow.png
    .png
  • Image/Preview_split_01.png
    .png
  • Image/Preview_split_04.png
    .png
  • Image/Preview_split_06.png
    .png
  • Image/Preview_split_07.png
    .png
  • Image/Preview_split_08.png
    .png
  • Image/Preview_split_09.png
    .png
  • Image/Preview_split_13.png
    .png
  • Image/Preview_split_16.png
    .png
  • Image/Preview_split_20.png
    .png
  • Image/Preview_split_25.png
    .png
  • Image/Preview_split_36.png
    .png
  • Image/Preview_split_49.png
    .png
  • Image/Preview_toolbar_ZoomIn.png
    .png
  • Image/Preview_toolbar_ZoomOut.png
    .png
  • Image/Preview_toolbar_fullscreen.png
    .png
  • Image/Preview_toolbar_next.png
    .png
  • Image/Preview_toolbar_pre.png
    .png
  • Image/Preview_toolbar_ptz.png
    .png
  • Image/Preview_toolbar_sound.png
    .png
  • Image/RecPlayCtr.bmp
  • Image/SlowForward.png
    .png
  • Image/btn_device_add.png
    .png
  • Image/connect_tip_limit.png
    .png
  • Image/conntect_tip_failed.png
    .png
  • Image/conntect_tip_ing00.png
    .png
  • Image/conntect_tip_ing01.png
    .png
  • Image/conntect_tip_ing02.png
    .png
  • Image/conntect_tip_ing03.png
    .png
  • Image/conntect_tip_ing04.png
    .png
  • Image/conntect_tip_ing05.png
    .png
  • Image/conntect_tip_ing06.png
    .png
  • Image/conntect_tip_ing07.png
    .png
  • Image/conntect_tip_passworderror.png
    .png
  • Image/lan.png
    .png
  • Image/lan_mouse_over.png
    .png
  • Image/slider_Thumb1.bmp
  • Image/slider_Thumb2.bmp
  • Image/slider_backgnd.bmp
  • Image/slider_foregnd.bmp
  • Image/splash.png
    .png
  • Image/tip_rtsp_forbidden.png
    .png
  • Image/volume1.png
    .png
  • Image/volume2.png
    .png
  • Image/volume3.png
    .png
  • Image/volume4.png
    .png
  • Image/wan.png
    .png
  • Image/wan_mouse_over.png
    .png
  • Language/Chinese Simplified.xml
  • Language/Chinese Traditional.xml
  • Language/English.xml
  • Language/German.xml
  • Language/Korean.xml
  • Language/Polish.xml
  • Language/Portuguese.xml
  • Language/Russian.xml
  • Language/Thai.xml
  • LogInstance.dll
    .dll windows:5 windows x86 arch:x86

    a7ced92727c704f67f6e4ef83210dc0e


    Headers

    Imports

    Exports

    Sections

  • UDP_Interface.dll
    .dll windows:5 windows x86 arch:x86

    53a8a7063966a3f67f6923700a06fd93


    Headers

    Imports

    Exports

    Sections

  • Update2.exe
    .exe windows:5 windows x86 arch:x86

    278ed13a97be8ec4d477d4349fb2d805


    Headers

    Imports

    Sections

  • WebApi.dll
    .dll windows:6 windows x86 arch:x86

    a4ccd673be4111cccf1ce63df02b2d2e


    Headers

    Imports

    Exports

    Sections

  • avcodec-53.dll
    .dll windows:4 windows x86 arch:x86

    dec1a6f0cdd9cf1b091b284a60c650fb


    Headers

    Imports

    Exports

    Sections

  • avutil-51.dll
    .dll windows:4 windows x86 arch:x86

    3b75c87c7d7b0d8833659ad81d0426eb


    Headers

    Imports

    Exports

    Sections

  • avutil-55.dll
    .dll windows:4 windows x86 arch:x86

    53d119c2414ba2560e5fb884c1a52955


    Headers

    Imports

    Exports

    Sections

  • glew32.dll
    .dll windows:6 windows x86 arch:x86

    903261720220ce99dcaaf3ab477563d0


    Headers

    Imports

    Exports

    Sections

  • glut32.dll
    .dll windows:4 windows x86 arch:x86

    74cb82df19b83b232485ac656177450f


    Headers

    Imports

    Exports

    Sections

  • libfaac.dll
    .dll windows:5 windows x86 arch:x86

    6cae71d327a5197048822a0595900f14


    Headers

    Imports

    Exports

    Sections

  • libh264dec.dll
    .dll windows:4 windows x86 arch:x86

    ed53e35a7ad3bbf71cd77513439ae1b7


    Headers

    Imports

    Exports

    Sections

  • libh265dec.dll
    .dll windows:6 windows x86 arch:x86

    04d0b035c677389bf085dfd25f38f717


    Headers

    Imports

    Exports

    Sections

  • libmp4v2.dll
    .dll windows:5 windows x86 arch:x86

    ebd9b2acee3c5c67124fa63e64215644


    Headers

    Imports

    Exports

    Sections

  • libpthread-2.dll
    .dll windows:4 windows x86 arch:x86

    51b267abe7da0c9608e1ed8552559287


    Headers

    Imports

    Exports

    Sections

  • msvcr120.dll
    .dll windows:6 windows x86 arch:x86

    aa8d086deb6960b10f8791df466a5610


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • player.dll
    .dll windows:5 windows x86 arch:x86

    fba7fcf5066d8b6a345dfa2dbdce6936


    Headers

    Imports

    Exports

    Sections

  • rtsp.dll
    .dll windows:5 windows x86 arch:x86

    69e7bd602423deb6429dcf0f2104e096


    Headers

    Imports

    Exports

    Sections

  • sqlite3.dll
    .dll windows:4 windows x86 arch:x86

    613eabe8672981562c5894476c4b7737


    Headers

    Imports

    Exports

    Sections

  • swscale-2.dll
    .dll windows:4 windows x86 arch:x86

    ac8eb1cfe1f4bae9a7b705e89f83b24d


    Headers

    Imports

    Exports

    Sections

  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/FindProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    8df26927f8978d4eb40ff179c0aa961b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    153027ec3b10bcea606b777657dd3402


    Headers

    Imports

    Exports

    Sections

  • vcredist_x86.exe
    .exe windows:5 windows x86 arch:x86

    092eb6daba2f17cbda102fd1a32acd00


    Code Sign

    Headers

    Imports

    Sections