661f2478cae5d94b7e00ccb4ec52f2dac9a66fbd35bdcf0ffa37b209d56a7670

Sharing

Copy URL

Twitter E-mail

General

Target

661f2478cae5d94b7e00ccb4ec52f2dac9a66fbd35bdcf0ffa37b209d56a7670
Size

472KB
MD5

786b1b39fac49d9e484698294e0e9eba
SHA1

c4817a6574fa8b98d7fc6a86ab55c60d5d6705eb
SHA256

661f2478cae5d94b7e00ccb4ec52f2dac9a66fbd35bdcf0ffa37b209d56a7670
SHA512

55ba01353000af1b78fe8d8bcaef0b07aca4019e2df2537d0c1d9ef153dd7470babd1b86fe1a70acb21daa083cf35feac507cba93d5da66665000fd987a77287
SSDEEP

6144:874nrwIMwuwGM9jQGMHyuylBXTfPMc/5tZOV6E/lSulGnvA6VqS45wYJ5IwnOQEi:K438OsyuI9fUc/5KlSulGno5wYTIA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
661f2478cae5d94b7e00ccb4ec52f2dac9a66fbd35bdcf0ffa37b209d56a7670

Files

661f2478cae5d94b7e00ccb4ec52f2dac9a66fbd35bdcf0ffa37b209d56a7670
.exe windows:5 windows x64 arch:x64

d00cb72290131e7d6e391e469d94239f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

Y:\buildAgent\work\92fdc3e87996a4f3\SDKv3\Bin\x64\Release\MWCCPlayer_DRLib.pdb

Imports

mw_venc

mw_venc_create
mw_venc_destory
mw_venc_put_frame_ex
mw_venc_create_by_index
mw_venc_get_gpu_num
mw_venc_deinit
mw_venc_get_gpu_info_by_index
mw_venc_get_default_param
mw_venc_get_support_platfrom
mw_venc_init

opengl32

wglGetProcAddress

libmwcapture

MWUnregisterNotify
MWCloseChannel
MWUnregisterTimer
MWGetDeviceTime
MWScheduleTimer
MWCaptureInitInstance
MWCaptureExitInstance
MWRegisterTimer
MWGetChannelInfoByIndex
MWGetVideoEcoCaptureStatus
MWDestoryVideoCapture
MWStartVideoCapture
MWGetVideoFrameInfo
MWStartVideoEcoCapture
MWCaptureVideoFrameToVirtualAddressEx
MWGetVideoCaps
MWCaptureGetSDIANCPacket
MWGetDevicePath
MWRefreshDevice
MWStopVideoEcoCapture
MWPinVideoBuffer
MWCaptureSetVideoEcoFrame
MWUnpinVideoBuffer
MWGetNotifyStatus
MWGetVideoBufferInfo
MWStopVideoCapture
MWOpenChannelByPath
MWCaptureSetSDIANCType
MWGetChannelCount
MWRegisterNotify
MWGetVideoInputSourceArray
MWGetVideoCaptureStatus
MWGetChannelInfo

mw_mp4

mw_mp4_set_video
mw_mp4_write_subtitle
mw_mp4_close
mw_mp4_write_video
mw_mp4_set_subtitle
mw_mp4_open_ex

mw_cc708_decoder

MWCreateCC708Decoder
MWSetCC708DecodeType
MWSetCC708DecoderCallback
MWDisableOutputChannel
MWDecodeCC708
MWEnableOutputChannel

mw_cc708_render

?MWCreateRender@@YAPEAU_cc_render@@XZ
?MWRenderCC708BufferArea@@YA?AW4_CC_RESULT@@PEAEHHHHHHHPEAU_cc708_tv_window_screen@@PEAU_cc_font@@PEAU_cc_render@@@Z
?MWRenderCC608BufferArea@@YA?AW4_CC_RESULT@@PEAEHHHHHHHPEAU_cc608_buffer@@PEAU_cc_font@@PEAU_cc_render@@@Z

kernel32

TlsFree
TlsAlloc
QueryPerformanceFrequency
WideCharToMultiByte
GetModuleHandleW
GetDiskFreeSpaceExW
DeleteCriticalSection
EnterCriticalSection
MultiByteToWideChar
LeaveCriticalSection
InitializeCriticalSection
TryEnterCriticalSection
TlsSetValue
GetCurrentThreadId
CreateFileW
GetCurrentProcess
SetUnhandledExceptionFilter
CreateThread
CloseHandle
WaitForMultipleObjects
CreateEventW
SetEvent
WaitForSingleObject
LoadLibraryA
GetProcAddress
FreeLibrary
GlobalFree
GlobalUnlock
GlobalAlloc
GetSystemTimeAsFileTime
GetTickCount
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
Sleep
DecodePointer
EncodePointer
TlsGetValue
GetCurrentProcessId
GlobalLock
QueryPerformanceCounter

user32

RegisterDeviceNotificationW
EnumDisplaySettingsW
EnumDisplaySettingsExW
EnumDisplayDevicesW
ChangeDisplaySettingsExW
GetRawInputDeviceList
GetRawInputDeviceInfoA
TranslateMessage
DispatchMessageW
LoadImageW
RegisterClassExW
GetPropW
DefWindowProcW
TrackMouseEvent
ReleaseCapture
SetCapture
PtInRect
CopyIcon
WindowFromPoint
SetCursor
LoadCursorW
SetCursorPos
GetCursorPos
ScreenToClient
IsZoomed
IsWindowVisible
IsIconic
GetActiveWindow
SystemParametersInfoW
SetWindowLongW
BringWindowToTop
SetFocus
ShowWindow
DestroyIcon
UnregisterClassW
RemovePropW
DestroyWindow
CreateWindowExW
SetPropW
SetWindowPos
GetMessageTime
PeekMessageW
GetAsyncKeyState
GetKeyState
GetClientRect
ClientToScreen
ClipCursor
AdjustWindowRectEx
GetDC
wsprintfW
MessageBoxA
CloseClipboard
GetClipboardData
EmptyClipboard
OpenClipboard
SetClipboardData
GetWindowLongW
SetForegroundWindow

gdi32

SetDeviceGammaRamp
CreateDCW
GetDeviceCaps
DeleteDC
SwapBuffers
SetPixelFormat
DescribePixelFormat

comdlg32

GetSaveFileNameW

shell32

DragFinish
DragAcceptFiles
DragQueryFileW
DragQueryPoint

msvcp100

?_Xout_of_range@std@@YAXPEBD@Z
??1_Container_base12@std@@QEAA@XZ
?_Xlength_error@std@@YAXPEBD@Z

imm32

ImmSetCompositionWindow
ImmGetContext
ImmReleaseContext

msvcr100

_onexit
_lock
__dllonexit
_unlock
__C_specific_handler
?terminate@@YAXXZ
realloc
pow
sqrt
_strdup
memcpy
memset
calloc
_time64
getenv
strcat_s
_localtime64
strcpy_s
clock
wcsstr
??2@YAPEAX_K@Z
??_V@YAXPEAX@Z
printf
??0exception@std@@QEAA@AEBV01@@Z
??0exception@std@@QEAA@AEBQEBD@Z
??1exception@std@@UEAA@XZ
_configthreadlocale
?what@exception@std@@UEBAPEBDXZ
atof
fprintf
strncmp
sprintf
fclose
fseek
vfprintf
ftell
fwrite
??3@YAXPEAX@Z
_vsnprintf
fread
strncpy
_wfopen
fflush
memchr
__iob_func
strstr
malloc
qsort
free
memmove
sscanf
_amsg_exit
__getmainargs
_XcptFilter
_exit
_cexit
exit
__initenv
__setusermatherr
_commode
_fmode
__set_app_type
__crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QEAAXXZ
_initterm
_initterm_e
__CxxFrameHandler3
atan2f
sinf
cosf
fmodf
powf
ceilf
floorf
sqrtf
_CxxThrowException
memcmp

dbghelp

MiniDumpWriteDump

Sections

.text
Size: 363KB - Virtual size: 363KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 86KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d00cb72290131e7d6e391e469d94239f

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mw_venc

opengl32

libmwcapture

mw_mp4

mw_cc708_decoder

mw_cc708_render

kernel32

user32

gdi32

comdlg32

shell32

msvcp100

imm32

msvcr100

dbghelp

Sections

.text Size: 363KB - Virtual size: 363KB

.rdata Size: 86KB - Virtual size: 85KB

.data Size: 2KB - Virtual size: 12KB

.pdata Size: 16KB - Virtual size: 15KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 363KB - Virtual size: 363KB

.rdata
Size: 86KB - Virtual size: 85KB

.data
Size: 2KB - Virtual size: 12KB

.pdata
Size: 16KB - Virtual size: 15KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 1KB - Virtual size: 1KB