D:\git\kollus-player-v2\Release\KollusPlayerCore.pdb
Static task
static1
Behavioral task
behavioral1
Sample
32c84b42a5c8b6808c788fe0945fe35372c4d28cdf187f83dc98185bec8e3601.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
32c84b42a5c8b6808c788fe0945fe35372c4d28cdf187f83dc98185bec8e3601.dll
Resource
win10v2004-20240426-en
General
-
Target
32c84b42a5c8b6808c788fe0945fe35372c4d28cdf187f83dc98185bec8e3601
-
Size
2.5MB
-
MD5
b579d0b2915516bba10093c6c9d472d9
-
SHA1
68e26b1cb550a8a1f63f42849dfd5ddd3e05b725
-
SHA256
32c84b42a5c8b6808c788fe0945fe35372c4d28cdf187f83dc98185bec8e3601
-
SHA512
550f21c755571a030fee39e7ccf726b76d4bbfdd83bd9b585ba7c2fb595a1639969ad48353913f55bb13574ab5e68b4c2e8021f81c52b0b1448367d2da3b22f9
-
SSDEEP
49152:xuUlr7lIsMPKdYK5KRQgJ2NWqisoxgc4EFVtVKxjGtGjXLQMz1BN2:Vr72sAK5KRQQ4loxgc4EFVmxjGtGjXV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 32c84b42a5c8b6808c788fe0945fe35372c4d28cdf187f83dc98185bec8e3601
Files
-
32c84b42a5c8b6808c788fe0945fe35372c4d28cdf187f83dc98185bec8e3601.dll windows:5 windows x86 arch:x86
892593595a6ea3a52b2055716416f607
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
InterlockedCompareExchange
CloseHandle
CreateThread
GetCurrentThreadId
CreateMutexW
WaitForSingleObject
ReleaseMutex
CreateEventW
InitializeCriticalSection
CreateSemaphoreW
SignalObjectAndWait
LeaveCriticalSection
EnterCriticalSection
ReleaseSemaphore
QueryPerformanceCounter
QueryPerformanceFrequency
GetLastError
OutputDebugStringA
CreateFileA
GetVersionExW
LoadLibraryA
IsWow64Process
GetCurrentProcess
GetVolumeInformationA
GetDriveTypeA
GetLogicalDriveStringsA
VerifyVersionInfoW
VerSetConditionMask
InterlockedDecrement
SetThreadPriority
DisableThreadLibraryCalls
VirtualQuery
GetModuleFileNameW
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
lstrlenW
LoadLibraryW
DeviceIoControl
GetProcAddress
GetSystemInfo
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
UnhandledExceptionFilter
GetTempPathA
InterlockedExchange
DecodePointer
EncodePointer
IsDebuggerPresent
RaiseException
AreFileApisANSI
GetSystemTime
LocalFree
GetCurrentProcessId
DeleteFileW
GetVersionExA
DeleteCriticalSection
GetFileAttributesExW
GetDiskFreeSpaceA
CreateFileMappingW
CreateFileMappingA
GetDiskFreeSpaceW
LockFileEx
HeapSize
GetTempPathW
FlushFileBuffers
CreateFileW
ReadFile
GetFileAttributesW
HeapValidate
HeapCreate
GetFileAttributesA
HeapDestroy
FormatMessageW
WriteFile
FormatMessageA
GetProcessHeap
UnlockFileEx
OutputDebugStringW
LockFile
UnlockFile
HeapFree
SystemTimeToFileTime
HeapAlloc
SetEndOfFile
UnmapViewOfFile
MapViewOfFile
SetFilePointer
GetFileSize
HeapReAlloc
GetFullPathNameA
GetFullPathNameW
DeleteFileA
RemoveDirectoryA
GetSystemTimeAsFileTime
FindNextFileA
FindClose
FindFirstFileA
GetTickCount
FreeLibrary
TerminateProcess
Sleep
user32
GetDC
GetWindowRect
GetDesktopWindow
GetSystemMetrics
gdi32
ChoosePixelFormat
SetPixelFormat
SwapBuffers
advapi32
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
ole32
CoCreateInstance
CoSetProxyBlanket
CoTaskMemFree
oleaut32
VariantClear
SysAllocString
SysFreeString
SetErrorInfo
VariantInit
VariantChangeType
CreateErrorInfo
GetErrorInfo
avcodec-55
av_free_packet
av_get_profile_name
av_init_packet
avcodec_alloc_context3
avcodec_close
avcodec_decode_audio4
avcodec_decode_video2
avcodec_find_decoder
avcodec_flush_buffers
avcodec_open2
avformat-55
avformat_open_input
avio_alloc_context
avformat_close_input
av_read_frame
avformat_network_init
avformat_alloc_context
avformat_seek_file
av_register_all
avformat_find_stream_info
avutil-52
av_buffer_create
av_dict_get
av_frame_alloc
av_frame_copy_props
av_frame_free
av_frame_get_buffer
av_frame_move_ref
av_frame_unref
av_free
av_freep
av_get_channel_layout_nb_channels
av_get_cpu_flags
av_image_copy_plane
av_log
av_mallocz
av_rescale_q
av_strerror
swscale-2
sws_freeContext
sws_getCoefficients
sws_getContext
sws_scale
sws_setColorspaceDetails
ddraw
DirectDrawCreateEx
ws2_32
setsockopt
ntohl
htonl
closesocket
ioctlsocket
gethostbyname
connect
select
inet_addr
recvfrom
sendto
bind
WSAGetLastError
recv
send
getsockopt
socket
dsound
ord11
swresample-0
swr_alloc_set_opts
swr_convert
swr_free
swr_init
libcurl
curl_easy_recv
curl_slist_free_all
curl_easy_getinfo
curl_easy_perform
curl_easy_setopt
curl_formfree
curl_formadd
curl_easy_escape
curl_free
curl_slist_append
curl_global_init
curl_easy_init
curl_easy_send
curl_easy_cleanup
pthreadvse2
pthread_mutex_destroy
pthread_cond_signal
pthread_mutex_init
pthread_create
pthread_cond_init
pthread_cond_timedwait
pthread_mutex_unlock
pthread_cond_destroy
pthread_mutex_lock
pthread_cond_wait
pthread_join
libeay32
ord188
ord95
ord281
ord2925
ord52
ord3312
ord78
ord181
ord2712
ord83
ord962
ord86
ord3315
ord1882
ord109
ord3313
ord4144
ord67
ord89
ord88
ord269
ord3823
ord4372
ord87
ord399
ord66
ord57
universalchardetector
chardet_create
chardet_handle_data
chardet_data_end
chardet_get_charset
chardet_destroy
msvcp100
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@_JH@Z
?tellp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@H@2@XZ
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD0@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@J@Z
?width@ios_base@std@@QAE_J_J@Z
?width@ios_base@std@@QBE_JXZ
?flags@ios_base@std@@QBEHXZ
?good@ios_base@std@@QBE_NXZ
?rdstate@ios_base@std@@QBEHXZ
?_Xinvalid_argument@std@@YAXPBD@Z
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
??0_Container_base12@std@@QAE@XZ
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEDD@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
?setf@ios_base@std@@QAEHHH@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?setf@ios_base@std@@QAEHH@Z
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?_Xout_of_range@std@@YAXPBD@Z
?_Orphan_all@_Container_base0@std@@QAEXXZ
?_Xlength_error@std@@YAXPBD@Z
??1_Container_base12@std@@QAE@XZ
?_Orphan_all@_Container_base12@std@@QAEXXZ
?_Swap_all@_Container_base0@std@@QAEXAAU12@@Z
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
?_BADOFF@std@@3_JB
?uncaught_exception@std@@YA_NXZ
??_7?$basic_istream@DU?$char_traits@D@std@@@std@@6B@
??_7?$basic_iostream@DU?$char_traits@D@std@@@std@@6B@
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
msvcr100
_atoi64
longjmp
clock
puts
qsort
putchar
_iob
floor
ceil
_open
_fdopen
_strdup
__clean_type_info_names_internal
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
_crt_debugger_hook
__CppXcptFilter
_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
_vsnprintf
_onexit
_lock
__dllonexit
_unlock
?terminate@@YAXXZ
_CRT_RTC_INITW
isxdigit
atol
_write
_read
_localtime32_s
strpbrk
modf
fseek
_close
_mktime32
_tzset
__timezone
__daylight
_mkdir
?_open@@YAHPBDHH@Z
getenv
fflush
ferror
_snwprintf
wcscat
fread
feof
vsprintf_s
mbstowcs
strncpy
iswalnum
sprintf_s
strrchr
??3@YAXPAX@Z
??2@YAPAXI@Z
__CxxFrameHandler3
malloc
strlen
memset
memmove
memcpy
memcmp
memchr
_CxxThrowException
??0exception@std@@QAE@ABV01@@Z
??0exception@std@@QAE@ABQBD@Z
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
free
_purecall
_stricmp
fclose
fwrite
pow
printf
fopen
sprintf
rand
srand
_time32
_strnicmp
remove
swprintf_s
wcscpy
realloc
strncmp
llabs
??_V@YAXPAX@Z
_localtime32
fprintf
atoi
strtok
strcmp
sscanf
strstr
strncpy_s
strcpy_s
abort
strcpy
strerror
_errno
_lseeki64
isprint
isspace
tolower
strtol
isdigit
strchr
strtod
strtoul
calloc
exit
__iob_func
_wcsnicmp
strcat
_snprintf
isalnum
wcslen
abs
wcsncpy
_wfopen
atof
_ftime32
toupper
opengl32
glEnable
glTexParameteri
glViewport
glDrawElements
glDisable
glFinish
wglCreateContext
glGetString
glGenTextures
wglGetCurrentContext
wglMakeCurrent
wglDeleteContext
glClear
glGetError
glReadPixels
glTexImage2D
glBindTexture
glew32
__glewCreateProgramObjectARB
__glewLinkProgramARB
__glewGetProgramivARB
__glewGetProgramInfoLog
__glewDeleteObjectARB
__glewCreateShaderObjectARB
__glewShaderSourceARB
__glewCompileShaderARB
__glewGetObjectParameterivARB
__glewGetShaderiv
__glewGetShaderInfoLog
__glewDeleteShader
__glewGetUniformLocationARB
__glewUniform1fARB
__glewActiveTextureARB
__glewUniform1iARB
__glewVertexAttribPointerARB
__glewEnableVertexAttribArrayARB
_glewInit@0
__glewGetAttribLocationARB
__glewUseProgramObjectARB
__glewAttachObjectARB
netapi32
NetWkstaGetInfo
NetApiBufferFree
rpcrt4
UuidCreateSequential
Exports
Exports
??0_Mutex@std@@QAE@W4_Uninitialized@1@@Z
??4_Init_locks@std@@QAEAAV01@ABV01@@Z
CreatePlayer
DestroyPlayer
Sections
.text Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 572KB - Virtual size: 571KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 25KB - Virtual size: 16.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 115KB - Virtual size: 115KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ