557b63bf3ca6d1c55075baf7959f3eeef622fa66838bde8b56c80a11587547be

Sharing

Copy URL Twitter E-mail

General

Target

557b63bf3ca6d1c55075baf7959f3eeef622fa66838bde8b56c80a11587547be
Size

432KB
MD5

42f5f1ec614694a57cc3eb7786c22dc0
SHA1

bd0777d8a740d798777e37bdf413898d368e4841
SHA256

557b63bf3ca6d1c55075baf7959f3eeef622fa66838bde8b56c80a11587547be
SHA512

9d817d3ed080a530e4f4f42ee20cf9d076e15c6553393ae1d9957ec901cba2f1189385d388f5f896bac1804c40f99d1f9313700346f8cca1fccc23a90f76dcbf
SSDEEP

12288:1dV/Mv7vhJXBw/N62DSAIUz9YS+OF3kK/RUzvneCdY6n3/nm:1dVEveyQ0K/RUzPY6f

Score

N/A

Malware Config

Signatures

Files

557b63bf3ca6d1c55075baf7959f3eeef622fa66838bde8b56c80a11587547be
.dll windows x86

9069034842eea95ec7e3c9addaa715a9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesA
Sleep
LeaveCriticalSection
EnterCriticalSection
CloseHandle
WaitForSingleObject
ReleaseMutex
DeleteCriticalSection
SetThreadPriority
ResumeThread
SetEvent
CreateMutexA
CreateEventA
InitializeCriticalSection
CreateThread
GetVersionExA
MultiByteToWideChar
WideCharToMultiByte
AreFileApisANSI
DeleteFileA
GetFileAttributesW
DeleteFileW
GetTempPathA
GetTempPathW
ReadFile
WriteFile
GetLastError
SetFilePointer
FlushFileBuffers
SetEndOfFile
GetFileSize
LockFile
LockFileEx
UnlockFile
GetFullPathNameA
GetFullPathNameW
LoadLibraryA
LoadLibraryW
GetProcAddress
FreeLibrary
GetSystemTime
GetSystemTimeAsFileTime
TlsSetValue
TlsGetValue
TlsAlloc
CreateFileA
CreateFileW
HeapFree
CreateDirectoryA
RtlUnwind
HeapAlloc
HeapReAlloc
GetCurrentThreadId
GetCommandLineA
GetProcessHeap
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStdHandle
GetModuleFileNameA
GetModuleHandleA
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
RaiseException
GetCPInfo
GetACP
GetOEMCP
HeapSize
ExitProcess
SetHandleCount
GetFileType
GetStartupInfoA
GetTimeZoneInformation
LCMapStringA
LCMapStringW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetLocaleInfoA
SetStdHandle
GetConsoleCP
GetConsoleMode
GetStringTypeA
GetStringTypeW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CompareStringA
CompareStringW
SetEnvironmentVariableA

Exports

Exports

?SUB_CallUseToggle@CBaseEntity@@QAEXXZ
AMXX_Attach
AMXX_CheckGame
AMXX_Detach
AMXX_PluginsLoaded
AMXX_PluginsUnloaded
AMXX_PluginsUnloading
AMXX_Query
GetEngineFunctions
GetEngineFunctions_Post
GetEntityAPI2
GetEntityAPI2_Post
GetNewDLLFunctions
GetNewDLLFunctions_Post
GiveFnptrsToDll
Meta_Attach
Meta_Detach
Meta_Query

Sections

.text
Size: 296KB - Virtual size: 294KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

9069034842eea95ec7e3c9addaa715a9

Headers

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 296KB - Virtual size: 294KB

.rdata Size: 44KB - Virtual size: 42KB

.data Size: 8KB - Virtual size: 32KB

.rsrc Size: 4KB - Virtual size: 176B

.reloc Size: 16KB - Virtual size: 12KB

.rmnet Size: 60KB - Virtual size: 60KB

.text
Size: 296KB - Virtual size: 294KB

.rdata
Size: 44KB - Virtual size: 42KB

.data
Size: 8KB - Virtual size: 32KB

.rsrc
Size: 4KB - Virtual size: 176B

.reloc
Size: 16KB - Virtual size: 12KB

.rmnet
Size: 60KB - Virtual size: 60KB