ldplayer.zip
- SHA256 8c00c221d0cc3d698c3eca3500ea098926aecded934d459afb3a4dde4b4b97eb
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ldplayer.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
24 signatures
150 seconds
Behavioral task
behavioral2
Sample
ldplayer.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
21 signatures
150 seconds
General
- Target ldplayer.zip
- Size 5.0MB
- Sample261107-ndh89axt4p
- SHA256 8c00c221d0cc3d698c3eca3500ea098926aecded934d459afb3a4dde4b4b97eb
- MD5 680d75da254d346c39dda4ea6954a471
- SHA1 6e65fe575dcb89a344298c70080e2e9ed5780cf5
- SHA512 f8682b1982ee321353ed10110af6c23a426bacf80b4fe3e638f71c058a5744f3e920c1fac36b4825c624108a3e79872cbd73754a1a225c6fc77e76c06ee126b4
- SSDEEP 98304:sMeb1W2vYvHDDN2HcrEOjCyBUAPC3fmptyjHb2V3rDYGR1H7EB:sjbgaYvXNAcIOjCepMfmPCkYyk
- TLSH T147363372F422F4D9105890D6B5BB664F5352B074BA41F6DB9E80F28F58F2BBC2DE0918
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/ldplayer.exe
File Explorer
-
ldplayer.zip.zip 5.0MB
-
ldplayer.exe.exe 5.5MB
ldplayer.exe
- IMPHASH 7db3347a82cbca5226fca39a1ede1494
- SHA256 c7d3cbb51d516b2cb9aa24084a274c4860005c00e0c83779fdbb38363cad2de5
- MD5 18b92fdf2fa89d4f2af41c1d121d0773
- SHA1 58035012b10d0d237555645260c487962055acc0
- SHA512 d00b092447e815333e0711584e9c2b30c5ba8d427ba3939573706507d94910753dbc66c1a2d7b7a94242fe6699d18540ec26f6c008924a37d49739c1ea57eeff
- SSDEEP 98304:nfivTSozq9HnjR8VERSojwAFAyZQzX8BHYbBNAT3vTqQJJHy2Y:fiv+Sq9DRsEcojwA5eX8p4qqa
- TLSH T19D461213F75905E4E096D2B8A1838712E7F1BC5A8322A3C743E6F25A2F577D06A3F650
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5152
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
PDB paths
advapi32
CloseServiceHandle
CreateServiceW
OpenSCManagerW
OpenServiceW
StartServiceW
iphlpapi
GetExtendedTcpTable
kernel32
CloseHandle
CreateDirectoryA
CreateFileA
CreateFileW
CreateProcessA
CreateToolhelp32Snapshot
DeleteCriticalSection
DeleteFileW
DeviceIoControl
EnterCriticalSection
FindResourceA
FlushFileBuffers
FreeLibrary
GetCurrentProcessId
GetEnvironmentVariableA
GetFileSize
GetLastError
GetStartupInfoA
GetTempPathA
GetTempPathW
GetTickCount
GetVolumeInformationA
InitializeCriticalSection
IsDBCSLeadByte
LeaveCriticalSection
LoadLibraryExA
LoadResource
LockResource
OpenProcess
Process32FirstW
Process32NextW
QueryPerformanceCounter
ReadFile
SetEndOfFile
SetEnvironmentVariableA
SetFilePointer
SetUnhandledExceptionFilter
SizeofResource
Sleep
TerminateProcess
TlsGetValue
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WriteFile
lstrcatA
lstrcatW
lstrcmpiW
lstrcpyA
lstrlenA
api-ms-win-crt-environment-l1-1-0
__p__environ
api-ms-win-crt-heap-l1-1-0
_set_new_mode
calloc
free
malloc
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-private-l1-1-0
__C_specific_handler
memcpy
api-ms-win-crt-runtime-l1-1-0
__p___argc
__p___argv
__p__acmdln
_cexit
_configure_narrow_argv
_crt_atexit
_exit
_initialize_narrow_environment
_set_app_type
_initterm
_initterm_e
_set_invalid_parameter_handler
abort
exit
signal
api-ms-win-crt-stdio-l1-1-0
__acrt_iob_func
__p__commode
__p__fmode
__stdio_common_vfprintf
fflush
setvbuf
api-ms-win-crt-string-l1-1-0
strlen
strncmp
shell32
ShellExecuteExA
user32
wsprintfA
wsprintfW
ws2_32
ntohs
Name
.text
Size
20KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
160B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
38KB
Virtual Size
38KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.text
Size
1024B
Virtual Size
876B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.text
Size
Virtual Size
416B
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.text
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
5.5MB
Virtual Size
5.5MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
156B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ