e15ddb29ac477cf70f495ec0a503d69929a0ce3a2e91fb2e78dfea087e29fa2f

Sharing

Copy URL Twitter E-mail

General

Target

e15ddb29ac477cf70f495ec0a503d69929a0ce3a2e91fb2e78dfea087e29fa2f
Size

1.3MB
MD5

1cc35cd78d1ee61311393e7b6d0db708
SHA1

e1415e2df56f6cb284a1cd4c68cf282e483faebe
SHA256

e15ddb29ac477cf70f495ec0a503d69929a0ce3a2e91fb2e78dfea087e29fa2f
SHA512

4227d5e09ec0ba9d8ae5c18a3bf18cf59e54946a5dfe7902575cd1774d3a843895ca2e2120f37074f00f1b8e4daee33a9a6558d8a0ba558eb6106c1795412ea8
SSDEEP

24576:GSniYrVkGbcmb1vwRwXcWwFHdbfSLEfP+0Jo1AXM/kLco:GSniY/cA4wcXXqkH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e15ddb29ac477cf70f495ec0a503d69929a0ce3a2e91fb2e78dfea087e29fa2f

Files

e15ddb29ac477cf70f495ec0a503d69929a0ce3a2e91fb2e78dfea087e29fa2f
.exe windows:4 windows x64 arch:x64

34c10f3377a040c7b92fbcb6b4446d85

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

d:\jk_107\workspace\CBB_DH3.RD004352_PlaySDK_windows\code_path\Build\Win64_VC2005\dhplay\DemoSrc\playsdkdemo\Release\PlayDemo.pdb

Imports

play

ord7
ord5
ord82
ord25
ord10
ord160
ord17
ord34
PLAY_SetTranslateString
ord252
ord159
ord146
ord178
ord154
ord145
ord144
ord273
ord201
ord170
ord79
ord113
ord58
ord59
ord32
ord57
ord40
ord70
ord116
ord122
ord101
ord29
ord33
ord21
ord22
ord89
ord88
ord11
ord12
ord47
ord84
ord14
ord42
ord43
ord269
ord6
ord4
ord222
ord100
ord125
ord87
ord19
ord18
ord218
ord110
ord3

kernel32

lstrcmpiW
WriteFile
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
DuplicateHandle
GetCurrentProcess
FindClose
FindFirstFileW
GetVolumeInformationW
GetFullPathNameW
GetVersionExW
GetCurrentProcessId
MulDiv
LocalFree
FormatMessageW
GlobalAlloc
GlobalSize
CopyFileW
GetModuleHandleA
CompareStringA
GetLocaleInfoW
lstrcmpA
EnumResourceLanguagesW
GetVersion
ConvertDefaultLocale
GetCurrentThread
SetThreadPriority
ResumeThread
SuspendThread
GlobalFlags
LocalAlloc
TlsGetValue
TlsAlloc
GlobalReAlloc
GlobalHandle
TlsSetValue
LocalReAlloc
DeleteCriticalSection
GetThreadLocale
GlobalGetAtomNameW
GetAtomNameW
SetErrorMode
FileTimeToSystemTime
FileTimeToLocalFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
SetFileTime
SetFileAttributesW
GetFileAttributesW
GetFileTime
lstrlenA
GetPrivateProfileIntW
WritePrivateProfileStringW
GetCurrentDirectoryW
HeapFree
HeapAlloc
GetProcessHeap
GetStartupInfoW
RtlLookupFunctionEntry
RtlUnwindEx
RaiseException
RtlPcToFileHeader
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlCaptureContext
HeapReAlloc
ExitProcess
ExitThread
HeapSize
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
FlsGetValue
FlsSetValue
FlsFree
FlsAlloc
HeapSetInformation
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetSystemTimeAsFileTime
RtlVirtualUnwind
FatalAppExitA
SetConsoleCtrlHandler
GetTimeZoneInformation
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetConsoleCP
GetConsoleMode
GetLocaleInfoA
SetStdHandle
CreateFileA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetDateFormatA
GetTimeFormatA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
GetStringTypeExW
DeleteFileW
MoveFileW
lstrlenW
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
LoadLibraryW
FreeLibrary
CompareStringW
LoadLibraryA
SetLastError
lstrcmpW
GetProcAddress
GetVersionExA
GlobalLock
GlobalUnlock
GlobalFree
FreeResource
OutputDebugStringW
GetTickCount
GetSystemDefaultLangID
GetLocalTime
GetModuleHandleW
GetModuleFileNameW
GetPrivateProfileStringW
OutputDebugStringA
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
Sleep
ReadFile
CreateThread
SetEvent
WaitForSingleObject
TerminateThread
CloseHandle
CreateFileW
CreateEventW
SetFilePointer
GetLastError
GetShortPathNameW
CreateDirectoryW
LoadResource
LockResource
SizeofResource
FindResourceW
MultiByteToWideChar
WideCharToMultiByte
TlsFree

user32

SendDlgItemMessageW
SendDlgItemMessageA
RegisterWindowMessageW
LoadBitmapW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
CheckDlgButton
CheckRadioButton
GetDlgItemInt
GetDlgItemTextW
SetDlgItemInt
SetDlgItemTextW
IsDlgButtonChecked
IsDialogMessageW
SetWindowTextW
MoveWindow
ShowWindow
ScrollWindowEx
CharUpperW
GetWindowThreadProcessId
RemoveMenu
InsertMenuW
AppendMenuW
GetMenuStringW
FillRect
TabbedTextOutW
DrawTextW
DrawTextExW
GrayStringW
ClientToScreen
GetWindowDC
BeginPaint
EndPaint
InflateRect
GetKeyNameTextW
MapVirtualKeyW
DestroyMenu
SystemParametersInfoW
PostQuitMessage
ValidateRect
GetCursorPos
TranslateMessage
GetMessageW
SetCursor
ShowOwnedPopups
MapDialogRect
SetWindowContextHelpId
WindowFromPoint
GetDialogBaseUnits
GetSysColorBrush
LoadCursorW
UnregisterClassW
DeleteMenu
WaitMessage
DestroyIcon
CharNextW
CopyAcceleratorTableW
SetRect
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
SetMenu
BringWindowToTop
SetRectEmpty
CreatePopupMenu
InsertMenuItemW
LoadMenuW
ReuseDDElParam
UnpackDDElParam
RegisterClipboardFormatW
GetSystemMenu
SetParent
UnionRect
PostThreadMessageW
GetDCEx
LockWindowUpdate
GetLastActivePopup
DispatchMessageW
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
GetWindowLongPtrW
WinHelpW
UnhookWindowsHookEx
GetMessageTime
UnregisterClassA
PeekMessageW
MapWindowPoints
ScrollWindow
TrackPopupMenuEx
TrackPopupMenu
GetKeyState
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
IsWindowVisible
MessageBoxW
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
GetSysColor
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
CopyRect
PtInRect
SetWindowPlacement
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
SetWindowLongW
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
EndDialog
SetTimer
UpdateWindow
IsIconic
GetMenu
GetMenuState
DrawIcon
TranslateAcceleratorW
IsWindow
GetSystemMetrics
LoadAcceleratorsW
ReleaseCapture
SetCapture
GetWindow
ModifyMenuW
GetSubMenu
GetMenuItemInfoW
GetMenuItemID
GetMenuItemCount
EnableMenuItem
SetMenuItemInfoW
InvalidateRect
LoadImageW
PostMessageW
GetWindowLongW
GetParent
KillTimer
ReleaseDC
GetDC
GetWindowRect
GetClientRect
ClipCursor
IsRectEmpty
SendMessageW
EnableWindow
IsChild
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassNameW
GetClassLongPtrW
SetPropW
GetPropW
RemovePropW
GetFocus
SetFocus
GetWindowTextLengthW
GetWindowTextW
SetWindowLongPtrW
GetForegroundWindow
LoadIconW
CheckMenuItem
GetMessagePos

gdi32

MoveToEx
SelectObject
CreatePen
Polyline
GetObjectW
CreateCompatibleDC
BitBlt
CreateFontW
GetDCOrgEx
GetClipBox
SetTextColor
SetBkColor
CreateBitmap
GetDeviceCaps
CopyMetaFileW
CreateDCW
LineTo
RestoreDC
SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
SetGraphicsMode
SetWorldTransform
ModifyWorldTransform
SetMapMode
ExcludeClipRect
IntersectClipRect
OffsetClipRgn
SetTextAlign
SetTextJustification
SetTextCharacterExtra
SetMapperFlags
SetArcDirection
SaveDC
DeleteObject
SetColorAdjustment
SelectClipRgn
GetClipRgn
StretchDIBits
GetWindowExtEx
GetPixel
StartDocW
PtVisible
RectVisible
TextOutW
ExtTextOutW
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SelectClipPath
SetWindowExtEx
ScaleWindowExtEx
GetCurrentPositionEx
ArcTo
PolyDraw
CreateRectRgn
PolylineTo
PolyBezierTo
ExtSelectClipRgn
DeleteDC
CreateDIBPatternBrushPt
CreatePatternBrush
GetStockObject
SelectPalette
PlayMetaFileRecord
GetObjectType
EnumMetaFile
PlayMetaFile
ExtCreatePen
CreateSolidBrush
CreateHatchBrush
CreateFontIndirectW
CreateRectRgnIndirect
SetRectRgn
CombineRgn
GetMapMode
PatBlt
DPtoLP
GetTextExtentPoint32W
GetTextMetricsW
GetBkColor
GetTextColor
GetRgnBox
CreateCompatibleBitmap
GetCharWidthW
GetViewportExtEx

comdlg32

GetFileTitleW

winspool.drv

OpenPrinterW
ClosePrinter
DocumentPropertiesW

advapi32

RegSetValueExW
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
RegOpenKeyExW
RegSetValueW
RegOpenKeyW
RegQueryValueExW
RegCloseKey
RegDeleteValueW
RegCreateKeyW
RegCreateKeyExW

shell32

DragFinish
SHGetFileInfoW
SHGetMalloc
SHBrowseForFolderW
SHGetPathFromIDListW
ExtractIconW
DragQueryFileW

comctl32

_TrackMouseEvent

shlwapi

PathStripToRootW
PathIsUNCW
PathFindExtensionW
PathRemoveExtensionW
PathFileExistsW
PathFindFileNameW

oledlg

OleUIBusyW

ole32

CreateStreamOnHGlobal
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
OleSetClipboard
CoRevokeClassObject
CoRegisterClassObject
OleInitialize
CoFreeUnusedLibraries
CoTaskMemFree
SetConvertStg
WriteFmtUserTypeStg
WriteClassStg
OleRegGetUserType
ReadFmtUserTypeStg
ReadClassStg
CreateBindCtx
ReleaseStgMedium
CoTaskMemAlloc
StringFromCLSID
CoTreatAsClass
OleDuplicateData
CLSIDFromProgID
CLSIDFromString
CoDisconnectObject
CoCreateInstance
StringFromGUID2
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleRun
OleUninitialize

oleaut32

SystemTimeToVariantTime
VarDateFromStr
SysReAllocStringLen
VarCyFromStr
VarBstrFromCy
VarBstrFromDec
VarDecFromStr
VarBstrFromDate
OleCreateFontIndirect
SysAllocString
LoadTypeLi
SysAllocStringLen
VariantClear
VariantChangeType
VariantInit
SysStringLen
SysFreeString
SysAllocStringByteLen
SysStringByteLen
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate
SafeArrayRedim
VariantCopy
SafeArrayAllocData
SafeArrayAllocDescriptor
SafeArrayCopy
SafeArrayGetElement
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayLock
SafeArrayUnlock
SafeArrayDestroy
SafeArrayDestroyData
SafeArrayDestroyDescriptor
VariantTimeToSystemTime

winmm

timeGetTime

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

Sections

.text
Size: 874KB - Virtual size: 873KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 266KB - Virtual size: 265KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 62KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 101KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

34c10f3377a040c7b92fbcb6b4446d85

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

play

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

winmm

version

Sections

.text Size: 874KB - Virtual size: 873KB

.rdata Size: 266KB - Virtual size: 265KB

.data Size: 20KB - Virtual size: 57KB

.pdata Size: 62KB - Virtual size: 61KB

.rsrc Size: 101KB - Virtual size: 101KB

.text
Size: 874KB - Virtual size: 873KB

.rdata
Size: 266KB - Virtual size: 265KB

.data
Size: 20KB - Virtual size: 57KB

.pdata
Size: 62KB - Virtual size: 61KB

.rsrc
Size: 101KB - Virtual size: 101KB