7b06062372121380aca639a8d17b2a4e2e5f7f856dabb7144cb6305807250715

Sharing

Copy URL

Twitter E-mail

General

Target

7b06062372121380aca639a8d17b2a4e2e5f7f856dabb7144cb6305807250715
Size

208KB
MD5

641047a686acc9d7a47b1fd0af39f2d0
SHA1

8d471a8ed8d1a64c9b97d02b6a5b957a7780277f
SHA256

7b06062372121380aca639a8d17b2a4e2e5f7f856dabb7144cb6305807250715
SHA512

5d4e5b35864506f3c9ed8b7851cb873398fa13195df24850ee4dbaf162086e50bd5460bcd6e3bff2ce9e16e7f4c1df60e42db66ced7a7c529f53f5e8f07bb58d
SSDEEP

3072:uHfKj5SssNrNqZIitP2Siy8uZV0wp7IkjmjB+qYBakN+gK9Rv3Tp2Bg:u/Kj5SrN/2Vx7IkjkB+qYEkogK9NoBg

Score

N/A

Malware Config

Signatures

Files

7b06062372121380aca639a8d17b2a4e2e5f7f856dabb7144cb6305807250715
.dll windows x86

137e14afd40e1024b40f190021d3fff0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

setsockopt
bind
__WSAFDIsSet
listen
accept
select
recv
send
connect
htonl
htons
socket
closesocket

winmm

timeGetTime

psapi

EnumProcesses
EnumProcessModules
GetModuleBaseNameA

kernel32

CompareStringW
CompareStringA
ReadFile
SetEndOfFile
HeapSize
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetTimeZoneInformation
FlushFileBuffers
SetStdHandle
OutputDebugStringA
LocalFree
GetLastError
FormatMessageA
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetCurrentDirectoryA
DeleteCriticalSection
DeleteFileA
WaitForSingleObject
Sleep
ExitThread
CloseHandle
CreateThread
TerminateProcess
GetProcessId
GetModuleFileNameA
GetModuleHandleA
GetCurrentProcessId
OpenProcess
GetExitCodeProcess
CreateProcessA
HeapFree
HeapAlloc
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileA
GetCurrentThreadId
GetCommandLineA
GetVersionExA
GetProcessHeap
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapDestroy
HeapCreate
VirtualFree
SetEnvironmentVariableA
VirtualAlloc
HeapReAlloc
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
RtlUnwind
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
GetFullPathNameA
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
SetFilePointer
LoadLibraryA
CreateFileA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
MultiByteToWideChar

Exports

Exports

MaestroClient_Create
MaestroClient_Delete
MaestroClient_GetHeartbeatActive
MaestroClient_SendMessage
MaestroClient_SetHeartbeatActive
MaestroClient_SetMessageArrivedCallback
MaestroClient_Start
MaestroGameController_AreProcessesHung
MaestroGameController_GetHeartbeatActive
MaestroGameController_Init
MaestroGameController_KillProcesses
MaestroGameController_Remove
MaestroGameController_SendChatMessage
MaestroGameController_SendGameAbandonedMessage
MaestroGameController_SendGameConnectedToServerMessage
MaestroGameController_SendGameLaunchedMessage
MaestroGameController_SendGameVersionMismatchMessage
MaestroGameController_SendShutdownMessage
MaestroGameController_SetExitCallback
MaestroGameController_SetHeartbeatActive
MaestroGameController_SetReceiveChatMessageCallback
MaestroGameController_Start
MaestroMessageAgent_Create
MaestroMessageAgent_Delete
MaestroMessageAgent_GetHeartbeatActive
MaestroMessageAgent_GetIsRunning
MaestroMessageAgent_SendMessage
MaestroMessageAgent_SetHeartbeatActive
MaestroMessageAgent_SetMessageArrivedCallback
MaestroMessageAgent_Start
MaestroProcessHelper_AllFilesExist
MaestroProcessHelper_GetProcessPathForProcessType
MaestroProcessHelper_Init
MaestroProcessHelper_IsProcessRunning
MaestroProcessHelper_KillProcess
MaestroProcessHelper_KillProcessByName
MaestroProcessHelper_Remove
MaestroProcessHelper_StartProcess
MaestroProcessHelper_StopProcess
MaestroServerController_Init
MaestroServerController_ProcessEvents
MaestroServerController_RegisterHwnd
MaestroServerController_Remove
MaestroServerController_SetErrorMessageCallback
MaestroServerController_SetExitCallback
MaestroServerController_Start
MaestroServerController_StartArgs
MaestroServerController_StartArgsExplicit
MaestroServerController_Stop
MaestroServerController_VerifyAllNeededFilesExist
MaestroServer_Create
MaestroServer_Delete
MaestroServer_SendMessageToAllClients
MaestroServer_SetMessageArrivedCallback
MaestroServer_Start
Maestro_ErrorToString
Maestro_GetElapsedSeconds
Maestro_Init
Maestro_MessageTypeToString
Maestro_ProcessTypeToString
Maestro_Remove

Sections

.text
Size: 76KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

137e14afd40e1024b40f190021d3fff0

Headers

File Characteristics

Imports

ws2_32

winmm

psapi

kernel32

Exports

Exports

Sections

.text Size: 76KB - Virtual size: 72KB

.rdata Size: 16KB - Virtual size: 15KB

.data Size: 8KB - Virtual size: 11KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 8KB - Virtual size: 5KB

.text Size: 92KB - Virtual size: 92KB

.text
Size: 76KB - Virtual size: 72KB

.rdata
Size: 16KB - Virtual size: 15KB

.data
Size: 8KB - Virtual size: 11KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 8KB - Virtual size: 5KB

.text
Size: 92KB - Virtual size: 92KB