f5752b4e08f1d409d48960a28b28a841044b13bfe3807ca4b0fa3d7f26a03500

Sharing

Copy URL Twitter E-mail

General

Target

f5752b4e08f1d409d48960a28b28a841044b13bfe3807ca4b0fa3d7f26a03500
Size

277KB
MD5

771dea450605634f77dcf0b0a5227b50
SHA1

8c7b639d38a439a54127b215ca02267235afe324
SHA256

f5752b4e08f1d409d48960a28b28a841044b13bfe3807ca4b0fa3d7f26a03500
SHA512

c9f9ee861438edebd49cdf6d3b862c88d1b50b9643acf4ccc92594a0e2a1f8c93107c51a4a1bebb57bee984995295fcb0ff1a886a55d498f55143f9496913db3
SSDEEP

6144:ZXOtPNQdTPyHo5VNJnI/c8TxzqhE3sF7ncDNfdRX:ZXyPNQd7yHo5lnI7TxmhbNcvRX

Score

N/A

Malware Config

Signatures

Files

f5752b4e08f1d409d48960a28b28a841044b13bfe3807ca4b0fa3d7f26a03500
.dll windows x86

c228f2f0c46aa4864876930a0ff59a7f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameW
LocalAlloc
TlsAlloc
LocalFree
TlsFree
GetPrivateProfileStructW
WritePrivateProfileStructW
GetLastError
CreateDirectoryW
GetPrivateProfileStringW
WritePrivateProfileStringW
GetCurrentDirectoryW
DeleteFileW
GetCurrentProcess
GetModuleHandleW
GetProcAddress
GetFileAttributesW
GetModuleHandleA
WriteFile
GetCurrentProcessId
GetFileSize
FindFirstFileW
SetFilePointer
GetTickCount
ReadFile
CreateFileW
FindClose
FindNextFileW
GetFileTime
CloseHandle
DeleteFileA
WriteConsoleW
SetStdHandle
TlsSetValue
TlsGetValue
GetStringTypeW
EncodePointer
DecodePointer
MultiByteToWideChar
GetSystemTimeAsFileTime
WideCharToMultiByte
GetCommandLineA
GetCurrentThreadId
RaiseException
RtlUnwind
IsProcessorFeaturePresent
IsDebuggerPresent
InterlockedDecrement
ExitProcess
GetModuleHandleExW
HeapSize
Sleep
GetStdHandle
HeapFree
HeapAlloc
InterlockedIncrement
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
SetLastError
GetProcessHeap
GetFileType
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
EnterCriticalSection
LeaveCriticalSection
GetConsoleCP
GetConsoleMode
SetFilePointerEx
LoadLibraryExW
HeapReAlloc
OutputDebugStringW
LoadLibraryW
LCMapStringW
FlushFileBuffers

user32

MessageBoxA

advapi32

GetUserNameW
GetUserNameA

shell32

SHGetSpecialFolderPathW

Exports

Exports

GetHSteamPipe
GetHSteamUser
SteamAPI_GetHSteamPipe
SteamAPI_GetHSteamUser
SteamAPI_GetSteamInstallPath
SteamAPI_Init
SteamAPI_InitSafe
SteamAPI_IsSteamRunning
SteamAPI_RegisterCallResult
SteamAPI_RegisterCallback
SteamAPI_RestartApp
SteamAPI_RestartAppIfNecessary
SteamAPI_RunCallbacks
SteamAPI_SetBreakpadAppID
SteamAPI_SetMiniDumpComment
SteamAPI_SetTryCatchCallbacks
SteamAPI_Shutdown
SteamAPI_UnregisterCallResult
SteamAPI_UnregisterCallback
SteamAPI_UseBreakpadCrashHandler
SteamAPI_WriteMiniDump
SteamApps
SteamClient
SteamContentServer
SteamContentServerUtils
SteamContentServer_Init
SteamContentServer_RunCallbacks
SteamContentServer_Shutdown
SteamFriends
SteamGameServer
SteamGameServerApps
SteamGameServerNetworking
SteamGameServerStats
SteamGameServerUtils
SteamGameServer_BSecure
SteamGameServer_GetHSteamPipe
SteamGameServer_GetHSteamUser
SteamGameServer_GetIPCCallCount
SteamGameServer_GetSteamID
SteamGameServer_Init
SteamGameServer_InitSafe
SteamGameServer_RunCallbacks
SteamGameServer_Shutdown
SteamHTTP
SteamMasterServerUpdater
SteamMatchmaking
SteamMatchmakingServers
SteamNetworking
SteamRemoteStorage
SteamScreenshots
SteamUser
SteamUserStats
SteamUtils
Steam_GetHSteamUserCurrent
Steam_RegisterInterfaceFuncs
Steam_RunCallbacks
g_pSteamClientGameServer

Sections

.text
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rld0
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rld1
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 102KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

c228f2f0c46aa4864876930a0ff59a7f

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

shell32

Exports

Exports

Sections

.text Size: 88KB - Virtual size: 87KB

.rdata Size: 32KB - Virtual size: 32KB

.data Size: 5KB - Virtual size: 14KB

.rld0 Size: 20KB - Virtual size: 20KB

.rld1 Size: 20KB - Virtual size: 19KB

.reloc Size: 7KB - Virtual size: 6KB

.text Size: 102KB - Virtual size: 104KB

.text
Size: 88KB - Virtual size: 87KB

.rdata
Size: 32KB - Virtual size: 32KB

.data
Size: 5KB - Virtual size: 14KB

.rld0
Size: 20KB - Virtual size: 20KB

.rld1
Size: 20KB - Virtual size: 19KB

.reloc
Size: 7KB - Virtual size: 6KB

.text
Size: 102KB - Virtual size: 104KB