153dff6b3e8573fe034baa971ecfeb83c88b7231038aea92947aa2b8bdc11f5f

Sharing

Copy URL

Twitter E-mail

General

Target

153dff6b3e8573fe034baa971ecfeb83c88b7231038aea92947aa2b8bdc11f5f
Size

1.3MB
MD5

4c9e04a0526d9209f8ee87537ce2bd7d
SHA1

e4304d69d8394c2094d94535c1e88f826e9bebba
SHA256

153dff6b3e8573fe034baa971ecfeb83c88b7231038aea92947aa2b8bdc11f5f
SHA512

7f437d4440fd9d8d518d5a4bbeb923b826d88594fb293d30411b1fa2a88471e863ac4152485ecbb087b91f07a30300ce8c41261743b31975cf30ea8b3d9046f2
SSDEEP

24576:KmqzMgziMSZ4OUmCPEcxRBPAl1jx46LQbX8AmC6JYKrLbBTbKD47:K9AgzBiVaBox46XAmC6JYybBTbI47

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
153dff6b3e8573fe034baa971ecfeb83c88b7231038aea92947aa2b8bdc11f5f

Files

153dff6b3e8573fe034baa971ecfeb83c88b7231038aea92947aa2b8bdc11f5f
.exe windows:6 windows x86 arch:x86

27f7c1466708f6b0dbd8260d9a285665

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\workspace\StellarPlayer_Windows_Release\app\StellarHub\Release\StellarHub.pdb

Imports

kernel32

SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
InitializeCriticalSectionEx
DeleteCriticalSection
DecodePointer
CreateEventW
SetEvent
SetLastError
UnmapViewOfFile
CreateFileMappingA
OpenFileMappingA
MapViewOfFile
VirtualQuery
GetEnvironmentStringsW
GetFileAttributesW
Sleep
GlobalAlloc
GlobalLock
GlobalFree
GlobalUnlock
GetSystemInfo
SetEndOfFile
CreateFileW
ReadConsoleW
WriteConsoleW
SetStdHandle
FreeEnvironmentStringsW
GetCommandLineW
GetOEMCP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
RaiseException
SetFilePointerEx
ReadFile
FlushFileBuffers
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetConsoleMode
GetConsoleCP
HeapSize
GetFileType
GetACP
WriteFile
GetStdHandle
HeapReAlloc
ExitThread
GetModuleHandleExW
ExitProcess
RtlUnwind
UnregisterWaitEx
QueryDepthSList
InterlockedFlushSList
ReleaseSemaphore
VirtualProtect
GetVersionExW
GetModuleHandleA
FreeLibraryAndExitThread
GetThreadTimes
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
lstrcmpiW
FreeLibrary
SetDllDirectoryW
GetCommandLineA
CloseHandle
GetLastError
LeaveCriticalSection
CreateMutexA
EnterCriticalSection
GetCurrentThreadId
GetModuleHandleW
GetProcAddress
LoadLibraryW
QueryPerformanceCounter
QueryPerformanceFrequency
WideCharToMultiByte
MultiByteToWideChar
GetModuleFileNameW
GetThreadPriority
SetThreadPriority
CreateThread
SwitchToThread
SignalObjectAndWait
CreateTimerQueue
LoadLibraryExA
VirtualFree
VirtualAlloc
FlushInstructionCache
InterlockedPushEntrySList
InterlockedPopEntrySList
GetProcessHeap
HeapFree
HeapAlloc
OutputDebugStringW
GetCurrentProcessId
GetStartupInfoW
DuplicateHandle
WaitForSingleObjectEx
GetCurrentProcess
GetCurrentThread
TryEnterCriticalSection
EncodePointer
GetCPInfo
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetTickCount
CompareStringW
LCMapStringW
GetLocaleInfoW
GetStringTypeW
ResetEvent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
InitializeSListHead
IsDebuggerPresent

user32

GetDC
GetKeyState
IsZoomed
FindWindowExW
SendMessageW
SetWindowLongW
GetWindowLongW
DefWindowProcW
CallWindowProcW
IsIconic
IsWindowVisible
ReleaseDC
BringWindowToTop
AttachThreadInput
GetForegroundWindow
GetWindowThreadProcessId
MoveWindow
GetClipboardData
SetClipboardData
CloseClipboard
EmptyClipboard
OpenClipboard
SetWindowTextW
GetClassNameW
SetCursor
SetClassLongW
ClientToScreen
EnumChildWindows
GetPropW
MessageBoxW
UpdateLayeredWindow
IsWindow
EndPaint
BeginPaint
PostMessageW
GetWindow
CreateWindowExW
LoadCursorW
GetClassInfoExW
RegisterClassExW
GetCursorPos
TrackMouseEvent
SetFocus
SetCapture
ReleaseCapture
GetCapture
GetWindowRect
RedrawWindow
ScreenToClient
SetWindowPos
LoadIconW
SetTimer
GetClientRect
SetPropW
GetMonitorInfoW
MonitorFromWindow
GetWindowPlacement
DestroyWindow
ShowWindow
CharNextW
GetSystemMetrics
UnregisterClassW

gdi32

SelectObject
CreateDIBSection
CreateCompatibleDC
DeleteObject
DeleteDC
GetDeviceCaps
BitBlt

advapi32

RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegEnumKeyExW
RegQueryInfoKeyW
RegCloseKey
RegDeleteKeyW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegDeleteValueW

shell32

ShellExecuteW
ShellExecuteExW
SHGetFolderPathW

ole32

RevokeDragDrop
CoCreateInstance
CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree

oleaut32

VarUI4FromStr

dwmapi

DwmExtendFrameIntoClientArea
DwmSetWindowAttribute

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

Sections

.text
Size: 944KB - Virtual size: 944KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 175KB - Virtual size: 174KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 15KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 117KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

27f7c1466708f6b0dbd8260d9a285665

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

dwmapi

version

Sections

.text Size: 944KB - Virtual size: 944KB

.rdata Size: 175KB - Virtual size: 174KB

.data Size: 15KB - Virtual size: 20KB

.gfids Size: 3KB - Virtual size: 3KB

.tls Size: 512B - Virtual size: 9B

.rsrc Size: 6KB - Virtual size: 5KB

.reloc Size: 117KB - Virtual size: 120KB

.text
Size: 944KB - Virtual size: 944KB

.rdata
Size: 175KB - Virtual size: 174KB

.data
Size: 15KB - Virtual size: 20KB

.gfids
Size: 3KB - Virtual size: 3KB

.tls
Size: 512B - Virtual size: 9B

.rsrc
Size: 6KB - Virtual size: 5KB

.reloc
Size: 117KB - Virtual size: 120KB