17b1a9f18cb89eeb5723ded417e80e142c8b89cc229b316dd3e0fcca4160410f

Sharing

Copy URL Twitter E-mail

General

Target

17b1a9f18cb89eeb5723ded417e80e142c8b89cc229b316dd3e0fcca4160410f
Size

1.5MB
MD5

c609c228ea65207e25b724732542bfbc
SHA1

ade87291d7a1a17a9453cd5f484f216ccacd9e88
SHA256

17b1a9f18cb89eeb5723ded417e80e142c8b89cc229b316dd3e0fcca4160410f
SHA512

96b005103139a4c805e98956c299e672332f23f52383a92ddb3fd2ba4f71481268540aafb2f8f76c9b05985a50518f5c838b2ab5b7e14040d813e178c148d970
SSDEEP

24576:dTJk0+BZnnF8OgAdsNnSkkErcQUfcl3PVP8430ZzX1qXlggJcxXPN:iBv85Ad9kkErcQUfMhipX1q+NxXP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17b1a9f18cb89eeb5723ded417e80e142c8b89cc229b316dd3e0fcca4160410f

Files

17b1a9f18cb89eeb5723ded417e80e142c8b89cc229b316dd3e0fcca4160410f
.exe windows:5 windows x86 arch:x86

a62aa23c58b2a6bbdb20c911de36b61f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\work\dvplayer_release\bin\DVPlayer4.pdb

Imports

gdi32

GetStockObject
SwapBuffers
ChoosePixelFormat
SetPixelFormat
DescribePixelFormat
SetSystemPaletteUse
SetDeviceGammaRamp
GetDeviceGammaRamp
GetSystemPaletteUse
UnrealizeObject
SetPaletteEntries
RealizePalette
SetDIBColorTable
SelectPalette
GetDIBits
CreatePalette
GetSystemPaletteEntries
GetDeviceCaps
GetObjectA
GdiFlush
GetCharABCWidthsW
GetTextExtentPoint32W
TextOutW
DeleteObject
SetTextColor
RoundRect
CreatePenIndirect
MoveToEx
LineTo
CreateSolidBrush
SetBkColor
ExtTextOutW
SetStretchBltMode
CreateDIBSection
StretchBlt
CombineRgn
GetClipBox
CreateRectRgnIndirect
ExtSelectClipRgn
SelectClipRgn
CreateCompatibleDC
CreateCompatibleBitmap
SaveDC
BitBlt
RestoreDC
Rectangle
SetWindowOrgEx
DeleteDC
CreatePen
GetObjectW
CreateFontIndirectW
SelectObject
GetTextMetricsW
SetBkMode
CreateRoundRectRgn

comdlg32

GetSaveFileNameW
GetOpenFileNameW

avcodec-58

av_free_packet
av_init_packet
av_packet_unref
avcodec_find_decoder
avcodec_flush_buffers
avcodec_open2
avcodec_receive_frame
avcodec_register_all
avcodec_send_packet
avpicture_fill
avpicture_get_size

avutil-56

av_frame_alloc
av_frame_free
av_free
av_freep
av_get_channel_layout_nb_channels
av_get_default_channel_layout
av_malloc
av_rescale_q
av_samples_get_buffer_size

avformat-58

av_find_best_stream
av_read_frame
av_register_all
av_seek_frame
avformat_close_input
avformat_find_stream_info
avformat_open_input
avio_feof

swresample-3

swr_alloc
swr_alloc_set_opts
swr_convert
swr_free
swr_init

swscale-5

sws_freeContext
sws_getContext
sws_scale

winmm

mciGetErrorStringA
waveOutGetErrorTextA
waveOutOpen
waveOutPrepareHeader
waveOutClose
waveOutUnprepareHeader
waveOutWrite
timeKillEvent
timeEndPeriod
timeSetEvent
timeBeginPeriod
timeGetTime
mciSendCommandA

gdiplus

GdipDeleteGraphics
GdipDeleteStringFormat
GdipDeleteFont
GdipAlloc
GdipFree
GdipCreateFontFromLogfontA
GdipCreateLineBrushI
GdiplusStartup
GdipCloneBrush
GdipCreateStringFormat
GdipCreateFontFromDC
GdipDrawString
GdipSetTextRenderingHint
GdipCreateFromHDC
GdipSetStringFormatLineAlign
GdiplusShutdown
GdipSetStringFormatAlign
GdipDeleteBrush

libcef

cef_task_runner_get_for_thread
cef_task_runner_get_for_current_thread
cef_print_settings_create
cef_string_utf8_to_utf16
cef_string_utf16_set
cef_string_utf16_clear
cef_menu_model_create
cef_post_data_element_create
cef_string_userfree_utf16_free
cef_shutdown
cef_do_message_loop_work
cef_run_message_loop
cef_quit_message_loop
cef_set_osmodal_loop
cef_enable_highdpi_support
cef_clear_cross_origin_whitelist
cef_clear_scheme_handler_factories
cef_currently_on
cef_now_from_system_trace_time
cef_refresh_web_plugins
cef_create_url
cef_get_path
cef_begin_tracing
cef_end_tracing
cef_execute_process
cef_api_hash
cef_initialize
cef_get_geolocation
cef_add_cross_origin_whitelist_entry
cef_remove_cross_origin_whitelist_entry
cef_parse_url
cef_format_url_for_security_display
cef_get_mime_type
cef_string_list_free
cef_get_extensions_for_mime_type
cef_string_list_alloc
cef_base64encode
cef_uriencode
cef_uridecode
cef_register_scheme_handler_factory
cef_post_task
cef_post_delayed_task
cef_register_extension
cef_visit_web_plugin_info
cef_unregister_internal_web_plugin
cef_register_web_plugin_crash
cef_is_web_plugin_unstable
cef_base64decode
cef_parse_json
cef_parse_jsonand_return_error
cef_write_json
cef_launch_process
cef_browser_host_create_browser
cef_browser_host_create_browser_sync
cef_binary_value_create
cef_value_create
cef_string_utf16_cmp
cef_string_list_append
cef_string_map_append
cef_string_multimap_append
cef_string_map_value
cef_string_map_key
cef_string_map_size
cef_string_multimap_value
cef_string_multimap_key
cef_string_multimap_size
cef_string_list_value
cef_string_list_size
cef_string_map_free
cef_string_map_alloc
cef_command_line_create
cef_command_line_get_global
cef_request_context_get_global_context
cef_request_context_create_context
cef_create_context_shared
cef_drag_data_create
cef_string_multimap_free
cef_string_multimap_alloc
cef_request_create
cef_v8value_create_undefined
cef_v8value_create_null
cef_v8value_create_bool
cef_v8value_create_int
cef_v8value_create_uint
cef_v8value_create_double
cef_v8value_create_date
cef_v8value_create_string
cef_v8value_create_object
cef_v8value_create_array
cef_v8value_create_function
cef_dictionary_value_create
cef_list_value_create
cef_string_list_copy
cef_process_message_create
cef_image_create
cef_cookie_manager_get_global_manager
cef_cookie_manager_create_manager
cef_stream_writer_create_for_file
cef_stream_writer_create_for_handler
cef_v8context_in_context
cef_v8context_get_current_context
cef_v8context_get_entered_context
cef_v8stack_trace_get_current
cef_response_create
cef_post_data_create

shell32

SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHBrowseForFolderW
DragFinish
DragQueryFileW
DragAcceptFiles
DragQueryFileA

user32

GetKeyboardState
MapVirtualKeyA
CreateWindowExA
DestroyCursor
GetCursor
CreateCursor
SetClassLongA
CreateIconFromResourceEx
SetWindowTextA
LoadKeyboardLayoutA
GetKeyboardLayoutNameA
MapVirtualKeyExA
UnregisterClassA
GetMessageA
MsgWaitForMultipleObjects
CallWindowProcA
SetCursorPos
GetDesktopWindow
ToAsciiEx
WindowFromPoint
PostMessageA
LoadImageA
RegisterClassA
ToUnicode
AdjustWindowRect
ClipCursor
DefWindowProcA
PeekMessageA
DispatchMessageA
DestroyIcon
ChangeDisplaySettingsA
GetWindowLongA
SetWindowLongA
SetForegroundWindow
GetForegroundWindow
EnumDisplaySettingsA
CreateAcceleratorTableW
InvalidateRgn
SetWindowTextW
GetWindowTextLengthW
GetWindowTextW
GetSysColor
ClientToScreen
SetCaretPos
ShowCaret
HideCaret
CreateCaret
SetRect
CharPrevW
DrawTextW
wvsprintfW
SetCursor
UnionRect
InflateRect
GetKeyboardLayout
GetCursorPos
GetUpdateRect
BeginPaint
EndPaint
MapWindowPoints
GetFocus
IsRectEmpty
DestroyWindow
ReleaseDC
PtInRect
ReleaseCapture
SetCapture
GetDC
GetKeyState
GetClassInfoExW
RegisterClassExW
LoadCursorW
RegisterClassW
GetMenu
AdjustWindowRectEx
PostMessageW
SetPropW
GetPropW
CallWindowProcW
GetSystemMetrics
LoadImageW
GetParent
GetWindow
EnableWindow
GetMessageW
SetFocus
TranslateMessage
DispatchMessageW
DefWindowProcW
wsprintfW
MoveWindow
CharNextW
IntersectRect
MessageBoxW
FillRect
SetWindowPos
IsWindow
SendMessageW
SetWindowPlacement
GetWindowPlacement
InvalidateRect
ShowWindow
UpdateWindow
CreateWindowExW
SetWindowRgn
SetTimer
ScreenToClient
GetWindowRect
PostQuitMessage
IsIconic
KillTimer
IsZoomed
GetClientRect
GetWindowLongW
MonitorFromWindow
SetWindowLongW
GetMonitorInfoW
GetClassInfoA
OffsetRect

ole32

CoInitialize
CLSIDFromProgID
CLSIDFromString
OleLockRunning
CoCreateInstance
CoUninitialize

comctl32

ord17
_TrackMouseEvent

kernel32

GetProcessHeap
SetEndOfFile
CompareStringW
CompareStringA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
GetStringTypeW
GetStringTypeA
SetStdHandle
GetLocaleInfoW
InitializeCriticalSectionAndSpinCount
InterlockedExchange
FlushFileBuffers
GetConsoleMode
GetConsoleCP
LCMapStringW
LCMapStringA
VirtualAlloc
FatalAppExitA
HeapSize
IsValidCodePage
GetOEMCP
GetCPInfo
GetSystemTimeAsFileTime
GetCurrentProcessId
VirtualFree
HeapDestroy
HeapCreate
SetLastError
TlsFree
GetTimeZoneInformation
TlsAlloc
TlsGetValue
DeleteCriticalSection
GetStartupInfoA
SetHandleCount
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetStdHandle
ExitProcess
LeaveCriticalSection
EnterCriticalSection
ExitThread
SetConsoleCtrlHandler
RaiseException
RtlUnwind
HeapAlloc
HeapReAlloc
HeapFree
GetFileAttributesW
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
CreateEventA
GetDriveTypeA
GetCurrentThread
SetThreadPriority
InterlockedIncrement
ReleaseSemaphore
InterlockedDecrement
CreateSemaphoreA
GetLocaleInfoA
GetModuleHandleA
LoadLibraryA
FreeLibrary
TerminateThread
GetCurrentThreadId
CreateThread
GetVersionExA
SetErrorMode
CreateFileA
GetEnvironmentVariableA
SetEnvironmentVariableA
QueryPerformanceCounter
ReleaseMutex
WaitForSingleObject
CreateMutexA
GetLocalTime
MulDiv
WriteFile
SetFileTime
CreateDirectoryW
DosDateTimeToFileTime
SystemTimeToFileTime
GetCurrentProcess
DuplicateHandle
GetFileType
SetFilePointer
GetACP
GetModuleHandleW
LoadLibraryW
GetProcAddress
FindResourceW
LoadResource
SizeofResource
LockResource
FreeResource
SetCurrentDirectoryW
GetCurrentDirectoryW
GetModuleFileNameW
GetLastError
CreateFileW
GetFileSize
ReadFile
CloseHandle
FindNextFileW
FindClose
FindFirstFileW
GetShortPathNameW
VerifyVersionInfoW
MultiByteToWideChar
WideCharToMultiByte
VerSetConditionMask
GetVolumeInformationW
GetLogicalDrives
GetDriveTypeW
GetTickCount
GetPrivateProfileIntW
WritePrivateProfileStringW
GetPrivateProfileStringW
Sleep
InterlockedCompareExchange
TlsSetValue
InitializeCriticalSection

Exports

Exports

SDL_AddTimer
SDL_AllocRW
SDL_AudioDriverName
SDL_AudioInit
SDL_AudioQuit
SDL_BuildAudioCVT
SDL_CDClose
SDL_CDEject
SDL_CDName
SDL_CDNumDrives
SDL_CDOpen
SDL_CDPause
SDL_CDPlay
SDL_CDPlayTracks
SDL_CDResume
SDL_CDStatus
SDL_CDStop
SDL_ClearError
SDL_CloseAudio
SDL_ConvertAudio
SDL_ConvertSurface
SDL_CreateCursor
SDL_CreateMutex
SDL_CreateRGBSurface
SDL_CreateRGBSurfaceFrom
SDL_CreateSemaphore
SDL_CreateThread
SDL_CreateYUVOverlay
SDL_Delay
SDL_DestroyMutex
SDL_DestroySemaphore
SDL_DisplayFormat
SDL_DisplayFormatAlpha
SDL_DisplayYUVOverlay
SDL_EnableKeyRepeat
SDL_EnableUNICODE
SDL_Error
SDL_EventState
SDL_FillRect
SDL_Flip
SDL_FreeCursor
SDL_FreeRW
SDL_FreeSurface
SDL_FreeYUVOverlay
SDL_GL_GetAttribute
SDL_GL_GetProcAddress
SDL_GL_LoadLibrary
SDL_GL_Lock
SDL_GL_SetAttribute
SDL_GL_SwapBuffers
SDL_GL_Unlock
SDL_GL_UpdateRects
SDL_GetAppState
SDL_GetAudioStatus
SDL_GetClipRect
SDL_GetCursor
SDL_GetError
SDL_GetEventFilter
SDL_GetKeyName
SDL_GetKeyRepeat
SDL_GetKeyState
SDL_GetModState
SDL_GetMouseState
SDL_GetRGB
SDL_GetRGBA
SDL_GetRelativeMouseState
SDL_GetThreadID
SDL_GetTicks
SDL_GetVideoInfo
SDL_GetVideoSurface
SDL_GetWMInfo
SDL_Has3DNow
SDL_Has3DNowExt
SDL_HasAltiVec
SDL_HasMMX
SDL_HasMMXExt
SDL_HasRDTSC
SDL_HasSSE
SDL_HasSSE2
SDL_Init
SDL_InitSubSystem
SDL_KillThread
SDL_Linked_Version
SDL_ListModes
SDL_LoadBMP_RW
SDL_LockAudio
SDL_LockSurface
SDL_LockYUVOverlay
SDL_LowerBlit
SDL_MapRGB
SDL_MapRGBA
SDL_MixAudio
SDL_OpenAudio
SDL_PauseAudio
SDL_PeepEvents
SDL_PollEvent
SDL_PumpEvents
SDL_PushEvent
SDL_Quit
SDL_QuitSubSystem
SDL_RWFromConstMem
SDL_RWFromFP
SDL_RWFromFile
SDL_RWFromMem
SDL_ReadBE16
SDL_ReadBE32
SDL_ReadBE64
SDL_ReadLE16
SDL_ReadLE32
SDL_ReadLE64
SDL_RegisterApp
SDL_RemoveTimer
SDL_SaveBMP_RW
SDL_SemPost
SDL_SemTryWait
SDL_SemValue
SDL_SemWait
SDL_SemWaitTimeout
SDL_SetAlpha
SDL_SetClipRect
SDL_SetColorKey
SDL_SetColors
SDL_SetCursor
SDL_SetError
SDL_SetEventFilter
SDL_SetModState
SDL_SetModuleHandle
SDL_SetPalette
SDL_SetTimer
SDL_SetVideoMode
SDL_ShowCursor
SDL_SoftStretch
SDL_ThreadID
SDL_UnlockAudio
SDL_UnlockSurface
SDL_UnlockYUVOverlay
SDL_UnregisterApp
SDL_UpdateRect
SDL_UpdateRects
SDL_UpperBlit
SDL_VideoDriverName
SDL_VideoInit
SDL_VideoModeOK
SDL_VideoQuit
SDL_WM_GetCaption
SDL_WM_GrabInput
SDL_WM_IconifyWindow
SDL_WM_SetCaption
SDL_WM_SetIcon
SDL_WM_ToggleFullScreen
SDL_WaitEvent
SDL_WaitThread
SDL_WarpMouse
SDL_WasInit
SDL_WriteBE16
SDL_WriteBE32
SDL_WriteBE64
SDL_WriteLE16
SDL_WriteLE32
SDL_WriteLE64
SDL_getenv
SDL_iconv
SDL_iconv_close
SDL_iconv_open
SDL_iconv_string
SDL_lltoa
SDL_mutexP
SDL_mutexV
SDL_putenv
SDL_revcpy
SDL_snprintf
SDL_strdup
SDL_strlcat
SDL_strlcpy
SDL_strtoull
SDL_ulltoa
SDL_vsnprintf

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 153KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 228KB - Virtual size: 228KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a62aa23c58b2a6bbdb20c911de36b61f

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

gdi32

comdlg32

avcodec-58

avutil-56

avformat-58

swresample-3

swscale-5

winmm

gdiplus

libcef

shell32

user32

ole32

comctl32

kernel32

Exports

Exports

Sections

.text Size: 1.1MB - Virtual size: 1.1MB

.rdata Size: 153KB - Virtual size: 152KB

.data Size: 23KB - Virtual size: 56KB

.rsrc Size: 228KB - Virtual size: 228KB

.reloc Size: 61KB - Virtual size: 61KB

.text
Size: 1.1MB - Virtual size: 1.1MB

.rdata
Size: 153KB - Virtual size: 152KB

.data
Size: 23KB - Virtual size: 56KB

.rsrc
Size: 228KB - Virtual size: 228KB

.reloc
Size: 61KB - Virtual size: 61KB