95b20fbee4b32ab96e6ca4c97aef3db507ba8d60d0b0df6a073663718937020a

Sharing

Copy URL

Twitter E-mail

General

Target

95b20fbee4b32ab96e6ca4c97aef3db507ba8d60d0b0df6a073663718937020a
Size

337KB
MD5

d67143edfddfa8783e91e7f1b0e9d6a8
SHA1

c59e0c42944bc79c27285224160a0cff6cc1c2a9
SHA256

95b20fbee4b32ab96e6ca4c97aef3db507ba8d60d0b0df6a073663718937020a
SHA512

e6d3e53fd860961d7ae207476352e4f3e84777ad1f1919cb83233635949af62b232914a9378a301ecf25456ff3c87744b5f96f2d5a6a51e2eeca6bbb17a4bd24
SSDEEP

3072:dYHD2YFkNLXPRBH83CbzmrL/LHF+H1VQ6QW919xnVyj+HMqQbmopvuaa5G5DGnyi:Q8NBH8SHmHTcH1D9LyjOWbmOplGas

Score

1^/10

Malware Config

Signatures

Files

95b20fbee4b32ab96e6ca4c97aef3db507ba8d60d0b0df6a073663718937020a
.dll windows:4 windows x86 arch:x86

3d0cb7b831f4de53c22494cb77cc3e31

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

04:00:00:00:00:01:2f:4e:e1:35:5c
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

13-04-2011 10:00

Not After

13-04-2019 10:00

Subject

CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

11:21:df:76:75:aa:a0:8d:1b:49:a8:3a:48:0f:14:85:5d:24
Certificate

Issuer

CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE

Not Before

22-02-2012 09:18

Not After

22-02-2015 09:18

Subject

CN=Baidu (China) Co.\, Ltd.,O=Baidu (China) Co.\, Ltd.,L=Shanghai,ST=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\clientci\workspace\yingyin_compile_1.19.0\wsmplayer\build\Release\pdb\MainFrame.pdb

Imports

log_report

XLogV

libui

?GetResManager@SkinEngine@@QAEPAVIResManager@@XZ
?UpdateLanguageEnv@SkinEngine@@QAEXXZ
?AttachWindow@SkinEngine@@QAEHIPAUHWND__@@@Z
?RegisterWindowSkin@SkinEngine@@QAEHPB_W0@Z

gdiplus

GdipGetImageHeight
GdipGetImageWidth
GdipDeleteGraphics
GdipCreateFromHDC
GdipFree
GdipCloneImage
GdipAlloc
GdipDrawImageRectRect
GdipDisposeImage
GdipLoadImageFromStream

kernel32

InterlockedIncrement
InterlockedDecrement
FindFirstFileW
FindNextFileW
FindClose
GetTickCount
lstrlenW
FindResourceW
SizeofResource
LockResource
LoadResource
FindResourceExW
GetProcAddress
GetConsoleMode
GetConsoleCP
SetFilePointer
LoadLibraryA
SetStdHandle
GetSystemTimeAsFileTime
VirtualAlloc
GetCurrentProcessId
QueryPerformanceCounter
VirtualFree
HeapCreate
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
IsValidCodePage
GetOEMCP
GetModuleFileNameA
GetStdHandle
ExitProcess
SetLastError
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
FlushFileBuffers
GetCommandLineA
GetCurrentThreadId
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleHandleA
GetStringTypeW
GetStringTypeA
GetCPInfo
GetLastError
LCMapStringW
LCMapStringA
GetModuleFileNameW
CreateProcessW
CloseHandle
GetCurrentProcess
MultiByteToWideChar
lstrlenA
CreateFileW
ReadFile
WriteFile
WideCharToMultiByte
InterlockedExchange
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
RaiseException
GetVersionExA
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
GetACP
GetLocaleInfoA
GetThreadLocale
TerminateProcess
RtlUnwind

user32

UnregisterClassA
InvalidateRect
SystemParametersInfoW
PostQuitMessage
ScreenToClient
PtInRect
CallWindowProcW
FindWindowExW
RemovePropW
SetPropW
SetWindowLongW
GetPropW
EnumChildWindows
EqualRect
ShowCursor
SetForegroundWindow
GetParent
WindowFromPoint
GetFocus
IsRectEmpty
CopyRect
ReleaseDC
GetWindowDC
PostMessageW
EndPaint
BeginPaint
SendMessageW
CharUpperW
LoadStringW
LoadCursorW
SetCursor
GetCursorPos
wsprintfW

gdi32

SetBkColor
DeleteDC
DeleteObject
BitBlt
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
SetViewportOrgEx
ExtTextOutW

shell32

DragQueryFileW
ShellExecuteW
SHCreateDirectoryExW

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

shlwapi

PathIsDirectoryW
PathGetArgsW
PathFileExistsW

comctl32

_TrackMouseEvent

advapi32

RegCreateKeyExW
RegCloseKey
RegQueryValueExW

Exports

Exports

Building

Sections

.text
Size: 224KB - Virtual size: 221KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3d0cb7b831f4de53c22494cb77cc3e31

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate

Extended Key Usages

Key Usages

04:00:00:00:00:01:2f:4e:e1:35:5cCertificate

Extended Key Usages

Key Usages

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50Certificate

Extended Key Usages

Key Usages

11:21:df:76:75:aa:a0:8d:1b:49:a8:3a:48:0f:14:85:5d:24Certificate

Extended Key Usages

Key Usages

Signer

Headers

File Characteristics

PDB Paths

Imports

log_report

libui

gdiplus

kernel32

user32

gdi32

shell32

version

shlwapi

comctl32

advapi32

Exports

Exports

Sections

.text Size: 224KB - Virtual size: 221KB

.rdata Size: 52KB - Virtual size: 48KB

.data Size: 24KB - Virtual size: 28KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 24KB - Virtual size: 22KB

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

04:00:00:00:00:01:2f:4e:e1:35:5c
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

11:21:df:76:75:aa:a0:8d:1b:49:a8:3a:48:0f:14:85:5d:24
Certificate

.text
Size: 224KB - Virtual size: 221KB

.rdata
Size: 52KB - Virtual size: 48KB

.data
Size: 24KB - Virtual size: 28KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 24KB - Virtual size: 22KB