b926f30761f1a594c3555ee819c6fa0366c88cfcc710603c39443a169a6a2b58

Sharing

Copy URL Twitter E-mail

General

Target

b926f30761f1a594c3555ee819c6fa0366c88cfcc710603c39443a169a6a2b58
Size

621KB
MD5

fdfb0bdabfc67363502ad2553e4df02d
SHA1

54f389c5cba562078377d82709808ee562d46556
SHA256

b926f30761f1a594c3555ee819c6fa0366c88cfcc710603c39443a169a6a2b58
SHA512

64b5ad8371b0b643658bef2007e96b2de9698a23a620c1645abb6acd6eef24b7969d9659ad080379d4820c6af25738bf13d2a02b93b70319533883124a8cc492
SSDEEP

12288:DAXS5/IabzmzbJuXyW9ObFvjP0l+biQBd0bC7/x:DNDlXmFvjP0IbiQeC7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b926f30761f1a594c3555ee819c6fa0366c88cfcc710603c39443a169a6a2b58

Files

b926f30761f1a594c3555ee819c6fa0366c88cfcc710603c39443a169a6a2b58
.exe windows:5 windows x86 arch:x86

bdeb8e87822a2d4e1143b84b9c54b5a9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

f:\SDK_ALL\Release\TDPlayer.pdb

Imports

kernel32

HeapFree
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
GetTimeZoneInformation
RtlUnwind
RaiseException
HeapReAlloc
ExitProcess
HeapSize
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
HeapCreate
HeapAlloc
QueryPerformanceCounter
GetACP
GetOEMCP
IsValidCodePage
LCMapStringW
GetConsoleCP
GetConsoleMode
InitializeCriticalSectionAndSpinCount
LCMapStringA
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
GetProcessHeap
CreateFileA
SetEnvironmentVariableA
GetStartupInfoW
GetTickCount
GetFileTime
GetFileSizeEx
GetFileAttributesW
FileTimeToLocalFileTime
SetErrorMode
FileTimeToSystemTime
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
InterlockedIncrement
GlobalFlags
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesW
GetLocaleInfoW
CompareStringA
InterlockedExchange
CreateFileW
GetFullPathNameW
GetVolumeInformationW
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
lstrcmpA
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
LoadLibraryA
lstrcmpW
GetVersionExA
GetCurrentThreadId
CloseHandle
InterlockedDecrement
GlobalFree
GlobalAlloc
FormatMessageW
LocalFree
GetCurrentProcessId
GlobalLock
GlobalUnlock
MulDiv
GetModuleHandleA
WinExec
Sleep
SetThreadUILanguage
SetThreadLocale
GetThreadLocale
GetCommandLineW
FreeLibrary
FindResourceExW
WritePrivateProfileStringW
GetPrivateProfileStringW
FindClose
FindFirstFileW
GetModuleFileNameW
OutputDebugStringW
WideCharToMultiByte
lstrlenW
FreeResource
FindResourceW
LoadResource
LockResource
SizeofResource
GetProcAddress
GetModuleHandleW
LoadLibraryW
GetLastError
SetLastError
GetCPInfo
MultiByteToWideChar
lstrlenA
GetVersionExW
VirtualFree
GetVersion

user32

SetCapture
CharNextW
CopyAcceleratorTableW
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
RegisterClipboardFormatW
PostThreadMessageW
MoveWindow
SetWindowTextW
IsDialogMessageW
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
EnableMenuItem
RegisterWindowMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
GetFocus
SetFocus
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
SetActiveWindow
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetMenu
SetForegroundWindow
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
IsRectEmpty
EqualRect
GetDlgCtrlID
CallWindowProcW
GetMenu
SystemParametersInfoA
GetWindowPlacement
GetWindow
SetWindowsHookExW
CallNextHookEx
GetMessageW
TranslateMessage
DispatchMessageW
PeekMessageW
ValidateRect
UnhookWindowsHookEx
IntersectRect
GetMenuStringW
GetWindowThreadProcessId
GetLastActivePopup
IsWindowEnabled
EndPaint
BeginPaint
GetWindowDC
IsWindow
SetWindowLongW
PtInRect
ScreenToClient
GetCursorPos
CheckMenuItem
SetWindowPos
KillTimer
MessageBoxW
CheckMenuRadioItem
IsWindowVisible
DrawIcon
IsIconic
LoadCursorW
SetTimer
BringWindowToTop
LoadIconW
GetKeyState
UpdateWindow
RedrawWindow
FrameRect
LoadImageW
DrawStateW
OffsetRect
GetClientRect
DrawFocusRect
InflateRect
PostMessageW
TrackPopupMenuEx
GetWindowRect
UnregisterClassW
ReleaseCapture
SetWindowContextHelpId
GetActiveWindow
WindowFromPoint
ClientToScreen
InvalidateRect
MapDialogRect
PostQuitMessage
CharUpperW
CreateDialogIndirectParamW
EndDialog
AdjustWindowRectEx
ShowWindow
SetCursor
GetParent
GetNextDlgTabItem
SendMessageW
GetWindowLongW
DestroyMenu
DestroyCursor
GrayStringW
DrawTextExW
TabbedTextOutW
EnableWindow
GetSubMenu
LoadBitmapW
GetSysColorBrush
CreatePopupMenu
CreateMenu
GetMenuItemID
GetMenuState
ModifyMenuW
GetMenuItemCount
AppendMenuW
ReleaseDC
GetDC
GetDesktopWindow
GetSystemMetrics
DestroyIcon
DrawTextW
SetRect
FillRect
GetSysColor
CopyRect
DefWindowProcW

gdi32

OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
SetViewportOrgEx
GetWindowExtEx
CreateRectRgnIndirect
GetMapMode
GetBkColor
GetTextColor
GetRgnBox
GetClipBox
SetMapMode
GetViewportExtEx
MoveToEx
LineTo
CreateCompatibleDC
RestoreDC
SaveDC
SetBkMode
SetTextColor
SetBkColor
CreateBitmap
GetStockObject
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
Rectangle
SetPixel
GetPixel
GetObjectW
DeleteDC
DeleteObject
SelectObject
CreatePen
CreateSolidBrush
GetDeviceCaps
BitBlt
CreateCompatibleBitmap

comdlg32

GetFileTitleW

winspool.drv

ClosePrinter
OpenPrinterW
DocumentPropertiesW

advapi32

RegQueryValueExW
RegCloseKey
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
RegOpenKeyExW
RegSetValueExW
RegCreateKeyExW
RegOpenKeyW

shell32

DragAcceptFiles
DragQueryFileW
DragFinish
SHBrowseForFolderW
SHGetPathFromIDListW
SHGetMalloc
ShellExecuteExW

comctl32

_TrackMouseEvent
InitCommonControlsEx

shlwapi

PathStripToRootW
PathIsUNCW
PathFindExtensionW
PathFindFileNameW
PathFileExistsW
PathRemoveFileSpecW

oledlg

OleUIBusyW

ole32

CoRevokeClassObject
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoInitializeEx
CoCreateInstance
CLSIDFromString
CLSIDFromProgID
CoTaskMemAlloc
CoTaskMemFree
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
CoUninitialize

oleaut32

SysAllocString
OleCreateFontIndirect
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
VariantCopy
VariantInit
VariantChangeType
VariantClear
SysFreeString
SysStringLen
SysAllocStringLen

winmm

PlaySoundW

Sections

.text
Size: 347KB - Virtual size: 346KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 78KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 142KB - Virtual size: 141KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bdeb8e87822a2d4e1143b84b9c54b5a9

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

winmm

Sections

.text Size: 347KB - Virtual size: 346KB

.rdata Size: 78KB - Virtual size: 77KB

.data Size: 12KB - Virtual size: 27KB

.rsrc Size: 142KB - Virtual size: 141KB

.reloc Size: 41KB - Virtual size: 40KB

.text
Size: 347KB - Virtual size: 346KB

.rdata
Size: 78KB - Virtual size: 77KB

.data
Size: 12KB - Virtual size: 27KB

.rsrc
Size: 142KB - Virtual size: 141KB

.reloc
Size: 41KB - Virtual size: 40KB