d:\Project\Smart_Player\北美康乐\Lite\ClearView\Trunk\Release\Win32\Smart Player.pdb
Static task
static1
Behavioral task
behavioral1
Sample
32a471aa4b69455acb391868d22987e0_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
32a471aa4b69455acb391868d22987e0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
32a471aa4b69455acb391868d22987e0_NeikiAnalytics.exe
-
Size
752KB
-
MD5
32a471aa4b69455acb391868d22987e0
-
SHA1
b440b87656a2dc6ab2f98202547c508afb53abf4
-
SHA256
41fbf5536832dbc17479a34f020bb2e187e0a2420cec9e25d6694561477fa468
-
SHA512
9149f3883ad468df7393f995585f5a5de4e32bb33cb802cf9f9651d062954a0e2caa24aab259178625bc88297a59a9f4e8b860e344cc7cf97306096dc4c726e0
-
SSDEEP
12288:L7ekbK3/gBqRT1zb1gCiAIBqnkjaXAgPqAyQV/1GImzQLhxNAZpVtI2h1ftAOETF:LwzKH1RaQkmzqhvAPVtI0zAOE13ukaUj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 32a471aa4b69455acb391868d22987e0_NeikiAnalytics.exe
Files
-
32a471aa4b69455acb391868d22987e0_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
5d684488f7b38072529ee3a1a6b8ae41
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
sf_uibase_r
??_7ISFEditCtrlEvent@@6B@
?CreateUIEditCtrl@CSFUIFactory@@SAPAVCSFEditCtrl@@PAVISFEditCtrlEvent@@@Z
?CreateUIComboBox@CSFUIFactory@@SAPAVCSFComboBox@@PAVISFComboBoxEvent@@@Z
?DestroyUIEditCtrl@CSFUIFactory@@SAXPAVCSFEditCtrl@@@Z
?DestroyUIComboBox@CSFUIFactory@@SAXPAVCSFComboBox@@@Z
??_7ISFComboBoxEvent@@6B@
?CreateUIListCtrl@CSFUIFactory@@SAPAVCSFListCtrl@@PAVISFListCtrlEvent@@@Z
?DestroyUIListCtrl@CSFUIFactory@@SAXPAVCSFListCtrl@@@Z
?GetDesktopRect@CSFUIFactory@@SAXAAUtagRECT@@@Z
?BTN_OnLButtonUp@ISFButtonEvent@@UAEXHIUtagPOINT@@@Z
?CreateFileDialog@CSFUIFactory@@SAHPAUFilePathInfo@@PA_WHHPAUSelectFolderUI@@PB_W3K3PAX@Z
?PtInRect@CSFRect@@QBEHUtagPOINT@@@Z
?CreateUISliderCtrl@CSFUIFactory@@SAPAVCSFSliderCtrl@@PAVISFSliderCtrlEvent@@@Z
?DestroyUISliderCtrl@CSFUIFactory@@SAXPAVCSFSliderCtrl@@@Z
??_7ISFSliderCtrlEvent@@6B@
?BTN_OnLButtonDown@ISFButtonEvent@@UAEXHIUtagPOINT@@@Z
?DeflateRect@CSFRect@@QAEXHH@Z
?PPP_OnMouseLeave@IPlayProgressEvent@@UAEXI@Z
?CreateUIPlayProgressPanel@CSFUIFactory@@SAPAVCSFPlayProgressPanel@@PAVIPlayProgressEvent@@@Z
?DestroyUIPlayProgressPanel@CSFUIFactory@@SAXPAVCSFPlayProgressPanel@@@Z
?OnMouseOverChannel@IPlayProgressEvent@@UAEXIHUtagPOINT@@H@Z
?UIPostMessage@CSFUIFactory@@SAXPAXH0@Z
?CreateUIMainWindow@CSFUIFactory@@SAPAVCSFDialog@@PAVISFDialogEvent@@PAX@Z
?DestroyUIMainWindow@CSFUIFactory@@SAXPAVCSFDialog@@@Z
?Quit@CSFUIFactory@@SAXXZ
?SetResourcePath@CSFUIFactory@@SAXPB_W@Z
?UnInstall@CSFUIFactory@@SAXXZ
?Install@CSFUIFactory@@SAXXZ
?GetCurrentPath@CSFUIFactory@@SAPA_WXZ
?AssociateFiletoApp@CSFUIFactory@@SAHPB_W0H@Z
?IsFileAssociatetoApp@CSFUIFactory@@SAHPB_W@Z
?MainLoop@CSFUIFactory@@SAHXZ
?SetFontProperty@CSFUIFactory@@SAXHAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?OnItemCheckBoxClick@ISFTreeCtrlEvent@@UAEXPAXI@Z
??_7ISFTreeCtrlEvent@@6B@
??_7ISFViewEvent@@6B@
??1ISFViewEvent@@UAE@XZ
?OnShowWindow@ISFViewEvent@@UAEXH@Z
?OnLButtonDown@ISFViewEvent@@UAEXIUtagPOINT@@@Z
?OnLButtonDblClk@ISFViewEvent@@UAEXIUtagPOINT@@@Z
?CreateUITreeCtrl@CSFUIFactory@@SAPAVCSFTreeCtrl@@PAVISFTreeCtrlEvent@@@Z
?CreateUIView@CSFUIFactory@@SAPAVCSFView@@PAVISFViewEvent@@@Z
?DestroyUITreeCtrl@CSFUIFactory@@SAXPAVCSFTreeCtrl@@@Z
?DestroyUIView@CSFUIFactory@@SAXPAVCSFView@@@Z
?OnItemClick@ISFTreeCtrlEvent@@UAEHPAXI@Z
?OnItemCheckStateChanged@ISFTreeCtrlEvent@@UAEXPAXH@Z
?OnSubWinZoom@ISFVideoWindowEvent@@UAEXHHH@Z
?OnSubWndExchanged@ISFVideoWindowEvent@@UAEXHH@Z
?OnSubWinOccupyRoom@ISFVideoWindowEvent@@UAEXHHH@Z
?BTN_OnMouseMove@ISFButtonEvent@@UAEXHIUtagPOINT@@@Z
?BTN_OnMouseLeave@ISFButtonEvent@@UAEXHIJ@Z
??_7ISFVideoWindowEvent@@6B@
?RADIO_OnShowWindow@ISFRadioBoxEvent@@UAEXHIH@Z
?VideoWidow_OnLButtonDown@ISFVideoWindowEvent@@UAEXHHAAUtagPOINT@@@Z
?VideoWidow_OnLButtonUp@ISFVideoWindowEvent@@UAEXHHAAUtagPOINT@@@Z
?OnPaintFailed@ISFVideoWindowEvent@@UAEXH@Z
?GetDefaultLayout@CSFVideoWindow@@SAPB_WW4LAYOUT_TYPE@@@Z
??_7ISFNumSpinerEvent@@6B@
?CreateUIRadioBox@CSFUIFactory@@SAPAVCSFRadioBox@@PAVISFRadioBoxEvent@@@Z
?GetUIWnd@ISFViewEvent@@QAEPAXXZ
??1ISFVideoWindowEvent@@UAE@XZ
?CreateUIVideoWindow@CSFUIFactory@@SAPAVCSFVideoWindow@@W4VIDEOWINDOWMODE@@PAVISFVideoWindowEvent@@HH@Z
?OnCreate@ISFVideoWindowEvent@@UAEHXZ
?CreateUINumSpiner@CSFUIFactory@@SAPAVCSFNumSpiner@@PAVISFNumSpinerEvent@@@Z
?OnDestroy@ISFVideoWindowEvent@@UAEXXZ
?OnSize@ISFVideoWindowEvent@@UAEXIHH@Z
?DestroyUIRadioBox@CSFUIFactory@@SAXPAVCSFRadioBox@@@Z
??_7ISFRadioBoxEvent@@6B@
?OnBnClickedVideoClose@ISFVideoWindowEvent@@UAEXHH@Z
?DestroyUIVideoWindow@CSFUIFactory@@SAXPAVCSFVideoWindow@@@Z
?OnBnClickedVideoSnap@ISFVideoWindowEvent@@UAEXHH@Z
?DestroyUINumSpiner@CSFUIFactory@@SAXPAVCSFNumSpiner@@@Z
?OnBnClickedVideoRecord@ISFVideoWindowEvent@@UAEXHHH@Z
?OnBnClickedVideoProperty@ISFVideoWindowEvent@@UAEXHH@Z
?OnFocusWndChanged@ISFVideoWindowEvent@@UAEXHH@Z
?OnDlgShowWindow@ISFDialogEvent@@UAEXHI@Z
?OffsetRect@CSFRect@@QAEXHH@Z
?OnDlgTimer@ISFDialogEvent@@UAEXI@Z
?OnMsgScreenLock@ISFDialogEvent@@UAEXH@Z
?OnDisplayChange@ISFDialogEvent@@UAEXHHH@Z
?MoveToXY@CSFRect@@QAEXHH@Z
?BTN_OnClicked@ISFButtonEvent@@UAEXH@Z
?BTN_OnCustomerClicked@ISFButtonEvent@@UAEXXZ
?CreateUIDialog@CSFUIFactory@@SAPAVCSFDialog@@PAVISFDialogEvent@@PAX@Z
?CreateUIButton@CSFUIFactory@@SAPAVCSFButton@@PAVISFButtonEvent@@@Z
?CreateUIStatic@CSFUIFactory@@SAPAVCSFStatic@@PAVISFStaticEvent@@@Z
?CreateUIPictureCtrl@CSFUIFactory@@SAPAVCSFPictureCtrl@@PAVISFPictureCtrlEvent@@@Z
?DestroyUIDialog@CSFUIFactory@@SAXPAVCSFDialog@@@Z
?DestroyUIButton@CSFUIFactory@@SAXPAVCSFButton@@@Z
??_7ISFButtonEvent@@6B@
??1ISFDialogEvent@@UAE@XZ
??_7CSFEventBase@@6B@
?DestroyUIStatic@CSFUIFactory@@SAXPAVCSFStatic@@@Z
?DestroyUIPictureCtrl@CSFUIFactory@@SAXPAVCSFPictureCtrl@@@Z
?Dlg_OnOK@ISFDialogEvent@@UAEXXZ
?Dlg_OnCancel@ISFDialogEvent@@UAEXXZ
?OnKeyEscapeClicked@ISFDialogEvent@@UAEXXZ
?Dlg_Close@ISFDialogEvent@@UAEHXZ
?OnDlgKeyDown@ISFDialogEvent@@UAEXII@Z
?OnDlgNcActivate@ISFDialogEvent@@UAEXH@Z
?OnDlgSize@ISFDialogEvent@@UAEXIAAH0@Z
?GetUIWnd@ISFDialogEvent@@QAEPAXXZ
?OnDlgFileDrop@ISFDialogEvent@@UAEXPB_W@Z
??_7ISFDialogEvent@@6B@
?OnDlgMouseLeave@ISFDialogEvent@@UAEXXZ
?OnDlgMouseHover@ISFDialogEvent@@UAEXXZ
playmodule
?OpenIVSTrack@CPlayModule@PLAY_MODULE@@QAEHXZ
?CloseIVSTrack@CPlayModule@PLAY_MODULE@@QAEHXZ
?GetRefValue@CPlayModule@PLAY_MODULE@@QAEHPAEPAI@Z
?SetRefValue@CPlayModule@PLAY_MODULE@@QAEHPAEI@Z
??_7IPlayModuleListener@PLAY_MODULE@@6B@
?StopAVIConvert@CPlaySdkWrapper@PLAY_MODULE@@QAEHXZ
?StartAVIConvert@CPlaySdkWrapper@PLAY_MODULE@@QAEHPAD@Z
??_7IAVIConvertListener@PLAY_MODULE@@6B@
?GetSourceBufferRemain@CPlaySdkWrapper@PLAY_MODULE@@QAEKXZ
?GetBufferValue@CPlaySdkWrapper@PLAY_MODULE@@QAEKK@Z
??1IAVIConvertListener@PLAY_MODULE@@UAE@XZ
?CloseStream@CPlaySdkWrapper@PLAY_MODULE@@QAEHXZ
?InputData@CPlaySdkWrapper@PLAY_MODULE@@QAEHPAEK@Z
?OpenStream@CPlaySdkWrapper@PLAY_MODULE@@QAEHK@Z
?SetStreamOpenMode@CPlaySdkWrapper@PLAY_MODULE@@QAEHK@Z
?SetAVIConvertListener@CPlaySdkWrapper@PLAY_MODULE@@QAEHPAVIAVIConvertListener@2@@Z
?Stop@CPlaySdkWrapper@PLAY_MODULE@@QAEHXZ
?Play@CPlaySdkWrapper@PLAY_MODULE@@QAEHPAX@Z
??1CPlaySdkWrapper@PLAY_MODULE@@UAE@XZ
??0CPlaySdkWrapper@PLAY_MODULE@@QAE@XZ
?GroupPlay_SetPlaySpeed@CPlayModule@PLAY_MODULE@@QAEHM@Z
?GroupPlay_PlayBackward@CPlayModule@PLAY_MODULE@@QAEHXZ
?GroupPlay_PlayForward@CPlayModule@PLAY_MODULE@@QAEHXZ
?GroupPlay_DelFromPlayGroup@CPlayModule@PLAY_MODULE@@QAEHPAV12@@Z
?GroupPlay_AddToPlayGroup@CPlayModule@PLAY_MODULE@@QAEHPAV12@@Z
?GroupPlay_Open@CPlayModule@PLAY_MODULE@@QAEHXZ
??1CPlayModule@PLAY_MODULE@@UAE@XZ
??0CPlayModule@PLAY_MODULE@@QAE@PAVIPlayModuleListener@1@@Z
?GroupPlay_Close@CPlayModule@PLAY_MODULE@@QAEHXZ
?GroupPlay_QueryGroupPlayingTime@CPlayModule@PLAY_MODULE@@QAEHPAU__DATETIME_INFO@@@Z
?GroupPlay_Seek@CPlayModule@PLAY_MODULE@@QAEHI@Z
?GroupPlay_Resume@CPlayModule@PLAY_MODULE@@QAEHXZ
?GroupPlay_Pause@CPlayModule@PLAY_MODULE@@QAEHXZ
?StepBackward@CPlayModule@PLAY_MODULE@@QAEHXZ
?StepForward@CPlayModule@PLAY_MODULE@@QAEHXZ
?GetCurrentPlayTime@CPlayModule@PLAY_MODULE@@QAEIXZ
?GetFileEndTime@CPlayModule@PLAY_MODULE@@QAEIXZ
?RenderLastFrame@CPlayModule@PLAY_MODULE@@QAEHXZ
?GetFileStartTime@CPlayModule@PLAY_MODULE@@QAEIXZ
?GetMediaInfo@CPlayModule@PLAY_MODULE@@QAEHPAUMEDIA_INFO@@@Z
?QueryInfo@CPlayModule@PLAY_MODULE@@QAEHHPADHPAH@Z
?PlayBackward@CPlayModule@PLAY_MODULE@@QAEHXZ
?IsPlaying@CPlayModule@PLAY_MODULE@@QAEHXZ
?PlayForward@CPlayModule@PLAY_MODULE@@QAEHXZ
?SnapPicture@CPlayModule@PLAY_MODULE@@QAEHPADW4PM_IMAGE_TYPE@@@Z
?SetCurrentPlayingVideoFrameHeight@CPlayModule@PLAY_MODULE@@QAEXI@Z
?AdjustWaveAudio@CPlayModule@PLAY_MODULE@@QAEHH@Z
?GetCurrentPlayingVideoFrameWidth@CPlayModule@PLAY_MODULE@@QAEIXZ
??1IPlayModuleListener@PLAY_MODULE@@UAE@XZ
?SetCurrentPlayingVideoFrameWidth@CPlayModule@PLAY_MODULE@@QAEXI@Z
?CloseAudio@CPlayModule@PLAY_MODULE@@QAEHXZ
?IsGetFileTimeInfo@CPlayModule@PLAY_MODULE@@QAEHXZ
?OpenAudio@CPlayModule@PLAY_MODULE@@QAEHXZ
?SetFileTimeInfo@CPlayModule@PLAY_MODULE@@QAEXII@Z
?SetSpeed@CPlayModule@PLAY_MODULE@@QAEHM@Z
?Seek@CPlayModule@PLAY_MODULE@@QAEHI@Z
?Seek@CPlayModule@PLAY_MODULE@@QAEHM@Z
?Resume@CPlayModule@PLAY_MODULE@@QAEHXZ
?ChooseSoundChannel@CPlayModule@PLAY_MODULE@@QAEHK@Z
?Pause@CPlayModule@PLAY_MODULE@@QAEHXZ
?StopDataRecord@CPlayModule@PLAY_MODULE@@QAEHXZ
?Close@CPlayModule@PLAY_MODULE@@QAEHXZ
?StartDataRecord@CPlayModule@PLAY_MODULE@@QAEHPADH@Z
?Stop@CPlayModule@PLAY_MODULE@@QAEHXZ
?Play@CPlayModule@PLAY_MODULE@@QAEHPAX@Z
?Open@CPlayModule@PLAY_MODULE@@QAEHPAD@Z
?GetCurrentPlayingVideoFrameHeight@CPlayModule@PLAY_MODULE@@QAEIXZ
kernel32
GetUserDefaultLCID
GetStringTypeW
GetStringTypeA
FlushFileBuffers
SetStdHandle
InterlockedExchange
HeapReAlloc
VirtualAlloc
GetLocaleInfoA
GetFullPathNameA
GetTimeZoneInformation
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetConsoleMode
GetConsoleCP
LCMapStringW
LCMapStringA
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetStartupInfoA
GetFileType
SetHandleCount
HeapSize
InterlockedDecrement
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleHandleA
GetStdHandle
RaiseException
RtlUnwind
GetDriveTypeA
FileTimeToLocalFileTime
FileTimeToSystemTime
GetSystemTimeAsFileTime
GetProcessHeap
HeapAlloc
GetVersionExA
HeapFree
GetCommandLineA
GetFileAttributesA
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileW
SetEndOfFile
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetStringTypeExA
InterlockedCompareExchange
ResetEvent
SetEvent
CreateEventA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
SetFilePointer
ReadFile
WriteFile
GetDiskFreeSpaceExA
GetCurrentDirectoryA
FindFirstFileA
DeleteFileA
CreateDirectoryA
CreateThread
MultiByteToWideChar
WideCharToMultiByte
FreeLibrary
OutputDebugStringW
SetLastError
FindNextFileW
FindFirstFileW
FindClose
GetTickCount
GetLastError
GetCurrentProcess
SetUnhandledExceptionFilter
SetErrorMode
CreateFileA
ExitProcess
GetCurrentProcessId
CloseHandle
GetCurrentThreadId
GetModuleFileNameA
LoadLibraryA
GetProcAddress
QueryPerformanceFrequency
QueryPerformanceCounter
WaitForSingleObject
GetModuleHandleW
Sleep
GetFileAttributesW
GetModuleFileNameW
OutputDebugStringA
user32
SetTimer
KillTimer
PostMessageW
DefWindowProcW
DestroyWindow
RegisterClassExW
UnregisterClassW
CreateWindowExW
LoadStringA
shell32
ShellExecuteA
SHGetSpecialFolderPathW
Sections
.text Size: 564KB - Virtual size: 563KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 120KB - Virtual size: 119KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 44KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ