c369a79b2c1bc86fe94896b9679370b7756d50a840ed12140d66d5bb03b1e792[.]zip

Sharing

Copy URL

Twitter E-mail

General

Target

c369a79b2c1bc86fe94896b9679370b7756d50a840ed12140d66d5bb03b1e792.zip
Size

2.8MB
MD5

4fc9a0caf262482bf9ef269e77a3eeb0
SHA1

74a0e23326ffec0233da6f6a3838682aade30dfb
SHA256

c369a79b2c1bc86fe94896b9679370b7756d50a840ed12140d66d5bb03b1e792
SHA512

5497081050f12af450fbee97eaefc98dbf9b4bd37e5ede8cfe1d8c27a3d652bd474237198a330538163f82844f75eb66c43f4220aabebcab3924a27b32844fad
SSDEEP

49152:cEXbF1lsHy/7iWpFhuNT5boQb6cZ0ESOGzim6Te7uBRHu17wahjP8yiIxNBqoovl:DF1lscx0yiANQofg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c369a79b2c1bc86fe94896b9679370b7756d50a840ed12140d66d5bb03b1e792.zip

Files

c369a79b2c1bc86fe94896b9679370b7756d50a840ed12140d66d5bb03b1e792.zip
.dll windows:6 windows x86 arch:x86

Password: infected

bd183bf4370a891e649f0ed46238e398

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\UI\slideshow-vcu_code_temp\Release\dvdcore.pdb

Imports

kernel32

lstrcmpW
lstrcmpiW
Sleep
InitializeCriticalSectionEx
RaiseException
DecodePointer
CreateJobObjectW
SetInformationJobObject
SetThreadExecutionState
K32GetProcessMemoryInfo
GetCurrentProcess
lstrlenW
VerSetConditionMask
VerifyVersionInfoW
GetModuleFileNameW
GetFileAttributesExW
FileTimeToLocalFileTime
FileTimeToSystemTime
MoveFileW
SetStdHandle
GetLocaleInfoA
GetModuleHandleW
GetNativeSystemInfo
GlobalMemoryStatusEx
GetLogicalProcessorInformation
GetTickCount64
GetCurrentProcessId
FindNextFileW
GetFileAttributesW
RemoveDirectoryW
MultiByteToWideChar
TerminateProcess
CreateProcessW
AssignProcessToJobObject
ResumeThread
GetExitCodeProcess
CreateFileMappingW
MapViewOfFileEx
UnmapViewOfFile
DuplicateHandle
VirtualQuery
VirtualProtect
GetSystemInfo
GetLocalTime
FindClose
FindFirstFileW
CopyFileW
WideCharToMultiByte
WaitForMultipleObjects
LeaveCriticalSection
WriteConsoleW
FlushFileBuffers
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
FindFirstFileExW
SetEndOfFile
GetOEMCP
GetACP
IsValidCodePage
GetStringTypeW
GetCPInfo
GetConsoleOutputCP
ReadConsoleW
GetConsoleMode
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
GetStdHandle
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
FindResourceW
FindResourceExW
LoadResource
LockResource
SizeofResource
GetProcessHeap
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
HeapDestroy
GetDriveTypeW
GetModuleHandleExW
GetFileType
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
EncodePointer
SetLastError
InterlockedFlushSList
RtlUnwind
InitializeSListHead
GetSystemTimeAsFileTime
GetStartupInfoW
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
GetDiskFreeSpaceExW
CreateDirectoryW
GetCurrentThreadId
GetTickCount
SetEvent
CreateThread
WaitForSingleObject
ResetEvent
CreateEventW
SetFilePointerEx
GetFileSizeEx
ReadFile
CreateFileW
SetFileAttributesW
CloseHandle
WriteFile
SystemTimeToFileTime
UnhandledExceptionFilter
WaitForSingleObjectEx
InitializeCriticalSectionAndSpinCount
LocalFree
OutputDebugStringW
IsDebuggerPresent
QueryPerformanceFrequency
QueryPerformanceCounter
FreeLibrary
ExitProcess
GetProcAddress
GetLastError
LoadLibraryExA
LoadLibraryW
DeleteFileW

user32

PostMessageW
GetDesktopWindow
DispatchMessageW
RegisterClassExW
GetMessageW
SetWindowLongW
CreateWindowExW
SendMessageW
DestroyWindow
TranslateMessage
DestroyIcon
CreateIconIndirect
GetIconInfo
LoadCursorFromFileW
GetCursorPos
SetRect
SetRectEmpty
GetWindowLongW
PostQuitMessage
DefWindowProcW
GetWindowThreadProcessId
IsWindow
LoadCursorW
SetCapture
SetCursor
ReleaseCapture
GetCapture
PeekMessageW
wvsprintfA
ClientToScreen
ScreenToClient
GetWindowRect
EqualRect
MoveWindow
ShowWindow
UpdateLayeredWindow
MessageBoxW
IsRectEmpty
GetSystemMetrics
ValidateRect
GetClientRect
SetTimer
KillTimer

gdi32

GetObjectW
CreateFontW
SelectObject
GetCurrentObject
DeleteObject
CreateCompatibleDC
CreateDIBSection
GetOutlineTextMetricsW
CreateFontIndirectW
DeleteDC
GetGlyphOutlineW

comdlg32

GetOpenFileNameW
GetSaveFileNameW

advapi32

RegOpenKeyExW
RegCloseKey
RegQueryValueExW

shell32

SHGetPathFromIDListW
SHBrowseForFolderW
SHGetFolderPathW

ole32

CoInitializeEx
CoUninitialize
CoCreateGuid
CoCreateInstance
PropVariantClear
CoTaskMemFree
IIDFromString
StringFromGUID2

oleaut32

VariantClear
SysAllocString
SysFreeString

shlwapi

PathRemoveBackslashW
SHCreateStreamOnFileEx
PathSearchAndQualifyW
PathFileExistsW
PathIsDirectoryEmptyW
PathFindExtensionW
StrChrW
PathIsRootW
PathRemoveFileSpecW
PathStripPathW
PathRemoveExtensionW
StrStrIW
PathCanonicalizeW
StrToIntW

winmm

waveOutOpen
waveOutReset
timeBeginPeriod
waveOutGetPosition
waveOutRestart
waveOutPause
waveOutClose
waveOutPrepareHeader
waveOutSetPlaybackRate
waveOutSetVolume
waveOutUnprepareHeader
waveOutWrite

comctl32

InitCommonControlsEx

version

VerQueryValueW
GetFileVersionInfoW

gdiplus

GdipDeleteGraphics
GdipSetPageUnit
GdipSetCompositingMode
GdipAddPathStringI
GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipFillEllipseI
GdipCreateStringFormat
GdipDeleteFontFamily
GdipCreateFontFamilyFromName
GdipGetPointCount
GdipGetPathData
GdipFillPolygon
GdipDrawEllipseI
GdipDrawImageRectI
GdipGetImageGraphicsContext
GdipDeleteStringFormat
GdipCreateHICONFromBitmap
GdipDrawCurve
GdipSetPenLineCap197819
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreatePen2
GdipSetLinePresetBlend
GdipAddPathEllipse
GdipGetPathGradientPointCount
GdipSetPathGradientSurroundColorsWithCount
GdipSetPathGradientCenterColor
GdipAddPathRectangleI
GdipFillRectangleI
GdipCreateLineBrushI
GdipSetSmoothingMode
GdipSetCompositingQuality
GdipSetTextRenderingHint
GdipCreateFromHDC
GdipCreateBitmapFromScan0
GdipFree
GdipAlloc
GdipCloneImage
GdipIsStyleAvailable
GdipTranslateWorldTransform
GdiplusStartup
GdipTransformMatrixPoints
GdipSetSolidFillColor
GdipSetPenDashArray
GdipSetPenDashStyle
GdipResetWorldTransform
GdipMultiplyWorldTransform
GdipRotateMatrix
GdipTranslateMatrix
GdipDeleteMatrix
GdipCreateMatrix
GdipDrawImageRect
GdipDrawEllipse
GdipFillEllipse
GdipDrawRectangle
GdipDrawImageI
GdipDrawLines
GdipDrawLine
GdipAddPathLine2
GdipAddPathRectangle
GdipFillRectangle
GdipSetPathGradientCenterPoint
GdipSetPathGradientFocusScales
GdipSetPathGradientPresetBlend
GdipCreatePathGradientFromPath
GdipSetPenLineJoin
GdipDeletePen
GdipCreatePen1
GdipCloneBrush
GdipDeleteBrush
GdipCreateSolidFill
GdipSetPenMode
GdipDrawPath
GdipFillPath
GdipDeletePath
GdipCreatePath
GdipClosePathFigure
GdipAddPathArc
GdipAddPathLine
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipSaveImageToFile
GdipSaveImageToStream
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipCreateBitmapFromFile
GdipDisposeImage
GdipLoadImageFromFile
GdipImageGetFrameDimensionsCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameCount
GdipGetPropertyItemSize
GdipGetPropertyItem
GdipImageSelectActiveFrame
GdipDrawImageRectRectI
GdipDrawRectangleI
GdipCreateFont
GdipGetGenericFontFamilySansSerif
GdipGetCellAscent
GdipGetEmHeight
GdipSetStringFormatMeasurableCharacterRanges
GdipSetStringFormatFlags
GdipCreateRegion
GdipDeleteRegion
GdipMeasureCharacterRanges
GdipGetRegionBounds
GdipDeleteFont
GdipScaleWorldTransform
GdipResetPath
GdipAddPathString
GdipDrawString
GdipSetInterpolationMode

Exports

Exports

AlphaBlend
AddDownloadedTransitions
AddDownloadedVideoFilter
AdjustRect
CheckSubtitleFile
CoreTest
CreateAudioSampleObject
CreateConvertLine
CreateFastConvert
CreateMediaCoverObject
CreateMediaImportObject
CreateMediaRemuxObject
CreateMediaReverseObject
CreateMiniDumpDlg
CreateMotionDesigner
CreateMotionTransitionDesigner
CreateSingleAudioPlayer
CreateSingleVideoPlayer
CreateSubtitleImportObject
CreateTimeLine
CreateTransitionPreview
CreateVideoFilterDesignerObject
CreateVideoSampleImportObject
CreateVobRemuxObject
D11DeviceReportLiveDeviceObjects
DeleteAudioFilterCustomise
DeleteMotionItem
DeleteSplitItem
DeleteTransitionCustomise
DeleteVideoFilterCustomise
DestroyMotionDesigner
DestroyMotionTransitionDesigner
DestroyVideoFilterDesignerObject
DetectHardwareCodecDevice
DisableHwAccl
FindAudioFilterClassInfo
FindTransitionClassInfo
FindVideoFilterClassInfo
GetAudioDeviceInfo
GetAudioFilterClassInfo
GetAudioFilterClassInfoCount
GetDiskFreeBytes
GetFontFamilyMask
GetHwVideoCodec
GetMotionCount
GetMotionData
GetSplitData
GetSplitDataCount
GetTransitionClassInfo
GetTransitionClassInfoCount
GetVideoFilterClassInfo
GetVideoFilterClassInfoCount
InitD2DPosition
IsDefaultD2DPosition
IsLoadD9Dll
IsSupportHwPlatform
IsSupportHwVideoCodec
LoadMotionTransitionData
LoadTimeLine
LogFile
MediaListDelete
MediaListDeleteAll
MediaListFind
MediaListFindByID
MediaListFindFile
MediaListGetCount
MediaListGetItem
NewMotionData
NewMotionItem
NewMotionTransitionData
NewSplitData
NewSplitItem
QualifyFileName
RegisterDeviceNotifies
ReleaseConvertLine
ReleaseFastConvert
RenameAudioFilterCustomise
RenameTransitionCustomise
RenameVideoFilterCustomise
ReportMemory
RestoreHwVideoCodecs
SaveSplitToFile
SelectFolder
SelectInputMultiFile
SelectInputSingleFile
SelectOutputFile
SetCdrtoolsPath
SetDefaultLanguage
SetHwVideoCodec
SetPreferHwPlatform
SetQTProcessEvents
StringFromReferenceTime
StringFromReferenceTimeEx
StringFromSeconds
StringFromSize
SwapMotionItem
UpdateProfileWithHwVideoCodec
VerifyFontFamilyStyle
WriteLogFile
createCoreContext
deviceInitialize
deviceUninitialize
dvdcoreChooseTempPath
dvdcoreInitialize
dvdcoreUninitialize
minidvdcoreInitialize
setCustomMediaInfoSavePath
setDownloadedResourcePath
setLogFilePath

Sections

.text
Size: 957KB - Virtual size: 960KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 610KB - Virtual size: 610KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: infected

bd183bf4370a891e649f0ed46238e398

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

shlwapi

winmm

comctl32

version

gdiplus

Exports

Exports

Sections

.text Size: 957KB - Virtual size: 960KB

.rdata Size: 1.2MB - Virtual size: 1.2MB

.data Size: 28KB - Virtual size: 44KB

.rsrc Size: 610KB - Virtual size: 610KB

.text
Size: 957KB - Virtual size: 960KB

.rdata
Size: 1.2MB - Virtual size: 1.2MB

.data
Size: 28KB - Virtual size: 44KB

.rsrc
Size: 610KB - Virtual size: 610KB