General

  • Target
    Install_iCam365_Player_2.3.0.6 (1).exe
  • Size 8.9MB
  • Sample260816-xae7vsvdrc
  • SHA256 83029208b410025f0190cd385737e0414c766109654a7b332d9f4cc758211c8b
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Unsigned PE 12 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • Install_iCam365_Player_2.3.0.6 (1).exe
    .exe 8.9MB
  • $PLUGINSDIR/LangDLL.dll
    .dll 5KB
  • SDL2.dll
    .dll 1.2MB
  • app.conf
    32B
  • app.ico
    14KB
  • dbghelp.dll
    .dll 834KB
  • gui/2lens.bmp
    2KB
  • gui/2lens_disabled.bmp
    2KB
  • gui/2lens_down.bmp
    2KB
  • gui/audio_disabled.bmp
    3KB
  • gui/audio_down.bmp
    3KB
  • gui/audio_hover.bmp
    3KB
  • gui/audio_normal.bmp
    3KB
  • gui/close.bmp
    1KB
  • gui/closedev.bmp
    630B
  • gui/closedev_disabled.bmp
    2KB
  • gui/closedev_down.bmp
    2KB
  • gui/closedev_hover.bmp
    2KB
  • gui/cloud.bmp
    11KB
  • gui/cloud_down.bmp
    5KB
  • gui/directory.bmp
    3KB
  • gui/directory_down.bmp
    3KB
  • gui/directory_hover.bmp
    3KB
  • gui/feature.bmp
    2KB
  • gui/gui.desc
    4KB
  • gui/live.bmp
    5KB
  • gui/live_down.bmp
    5KB
  • gui/logout.bmp
    3KB
  • gui/max.bmp
    1KB
  • gui/mic_disabled.bmp
    2KB
  • gui/mic_down.bmp
    2KB
  • gui/mic_normal.bmp
    2KB
  • gui/min.bmp
    1KB
  • gui/mute_disabled.bmp
    3KB
  • gui/mute_down.bmp
    3KB
  • gui/mute_hover.bmp
    3KB
  • gui/mute_normal.bmp
    3KB
  • gui/mydev.bmp
    15KB
  • gui/mydev_down.bmp
    15KB
  • gui/offline .bmp
    534B
  • gui/picinpic.bmp
    2KB
  • gui/picinpic_disabled.bmp
    2KB
  • gui/picinpic_down.bmp
    2KB
  • gui/picinpic_exchg.bmp
    2KB
  • gui/picinpic_exchg_disabled.bmp
    2KB
  • gui/picinpic_exchg_down.bmp
    2KB
  • gui/ptz.bmp
    10KB
  • gui/ptz_disabled.bmp
    27KB
  • gui/ptz_down.bmp
    27KB
  • gui/ptz_left.bmp
    27KB
  • gui/ptz_right.bmp
    27KB
  • gui/ptz_up.bmp
    27KB
  • gui/rec_disabled.bmp
    3KB
  • gui/rec_down.bmp
    3KB
  • gui/rec_hover.bmp
    3KB
  • gui/rec_normal.bmp
    3KB
  • gui/resize_rb.bmp
    1KB
  • gui/sdcard.bmp
    11KB
  • gui/sdcard_down.bmp
    7KB
  • gui/seldate.bmp
    6KB
  • gui/setting.bmp
    1KB
  • gui/setting_down.bmp
    1KB
  • gui/setting_hover.bmp
    1KB
  • gui/snap_disabled.bmp
    3KB
  • gui/snap_hover.bmp
    3KB
  • gui/snap_normal.bmp
    3KB
  • gui/split4.bmp
    15KB
  • gui/split4_down.bmp
    15KB
  • gui/title_left.bmp
    21KB
  • gui/x1.bmp
    2KB
  • gui/x1_disabled.bmp
    2KB
  • gui/x1_down.bmp
    2KB
  • gui/x2.bmp
    2KB
  • gui/x2_disabled.bmp
    2KB
  • gui/x2_down.bmp
    2KB
  • gui/x4.bmp
    2KB
  • gui/x4_disabled.bmp
    2KB
  • gui/x4_down.bmp
    2KB
  • gui/zh-CN/cloud.bmp
    8KB
  • gui/zh-CN/cloud_down.bmp
    7KB
  • gui/zh-CN/live.bmp
    8KB
  • gui/zh-CN/live_down.bmp
    8KB
  • gui/zh-CN/logout.bmp
    4KB
  • gui/zh-CN/mydev.bmp
    23KB
  • gui/zh-CN/mydev_down.bmp
    23KB
  • gui/zh-CN/sdcard.bmp
    8KB
  • gui/zh-CN/sdcard_down.bmp
    7KB
  • gui/zh-CN/seldate.bmp
    10KB
  • gui/zh-CN/split4.bmp
    23KB
  • gui/zh-CN/split4_down.bmp
    23KB
  • iCam365.exe
    .exe 2.1MB
  • jicdw.dll
    .dll 97KB
  • libcrypto-1_1.dll
    .dll 2.4MB
  • libcurl.dll
    .dll 385KB
  • libssl-1_1.dll
    .dll 518KB
  • uninstall.exe
    .exe 60KB
  • $PLUGINSDIR/LangDLL.dll
    .dll 5KB
  • webrtc.dll
    .dll 12.0MB

Install_iCam365_Player_2.3.0.6 (1).exe

  • IMPHASH 56a78d55f3f7af51443e58e0ce2fb5f6
  • SHA256 83029208b410025f0190cd385737e0414c766109654a7b332d9f4cc758211c8b
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Unsigned PE

    Checks for missing Authenticode signature.

Minor OS version
0
Major OS version
4
Entry point
13613
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths