42e40a1c20b39aafde892d49536bc41bd91cb6e2bcec2b817c11a72060721a03

Sharing

Copy URL Twitter E-mail

General

Target

42e40a1c20b39aafde892d49536bc41bd91cb6e2bcec2b817c11a72060721a03
Size

568KB
MD5

6438c6786195a7ec0265b6f35cc93260
SHA1

75ff1d94f86b1eb57a62339bde7e6d718dba219f
SHA256

42e40a1c20b39aafde892d49536bc41bd91cb6e2bcec2b817c11a72060721a03
SHA512

1d0a6e928178373f8ee55cf7078cff8fc554139a514babd0b0b748984a22498f56b17da07fe26500e0418e4dc300b39e3884da27901eb0de1c75e8526586de4d
SSDEEP

6144:9m3O+pGsEeG+HNbi6KFUgtAO1aRAH+8Czi+zbZ6eU5nrCSRnE65wuIOo:9J+pGQptbii8Oc+8CtzbZxg1RnEP5

Score

N/A

Malware Config

Signatures

Files

42e40a1c20b39aafde892d49536bc41bd91cb6e2bcec2b817c11a72060721a03
.dll windows x86

5248de779a3bc7eb30da033e3708ff77

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThreadId
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
MultiByteToWideChar
WideCharToMultiByte
GetProcAddress
GetModuleHandleA
GetCurrentProcessId
CloseHandle
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetLastError
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
LeaveCriticalSection
EnterCriticalSection
RaiseException
SetFilePointer
GetConsoleCP
GetConsoleMode
LoadLibraryA
InitializeCriticalSection
RtlUnwind
GetLocaleInfoA
GetStringTypeA
GetStringTypeW

tier0

?ConMsg@@YAXPBDZZ
Msg
?ExitScope@CVProfile@@QAEXXZ
g_VProfCurrentProfile
?EnterScope@CVProfile@@QAEXPBDH0_NH@Z
Warning
Error
?Lock@CThreadFastMutex@@ACEXII@Z
ConDMsg
g_pMemAlloc
GetCPUInformation
AssertValidStringPtr
_AssertValidWritePtr
_AssertValidReadPtr

vstdlib

RandomInt
RandomFloat
KeyValuesSystem

Exports

Exports

CreateInterface
cvar
g_pCVar

Sections

.text
Size: 360KB - Virtual size: 359KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 3.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

5248de779a3bc7eb30da033e3708ff77

Headers

File Characteristics

Imports

kernel32

tier0

vstdlib

Exports

Exports

Sections

.text Size: 360KB - Virtual size: 359KB

.rdata Size: 48KB - Virtual size: 46KB

.data Size: 16KB - Virtual size: 3.7MB

.reloc Size: 32KB - Virtual size: 31KB

.text Size: 108KB - Virtual size: 108KB

.text
Size: 360KB - Virtual size: 359KB

.rdata
Size: 48KB - Virtual size: 46KB

.data
Size: 16KB - Virtual size: 3.7MB

.reloc
Size: 32KB - Virtual size: 31KB

.text
Size: 108KB - Virtual size: 108KB