9255110f6bb53baa781cbe6c0cca8a82170dc67012f6ccfadb15702625b98b90

Sharing

Copy URL Twitter E-mail

General

Target

9255110f6bb53baa781cbe6c0cca8a82170dc67012f6ccfadb15702625b98b90
Size

284KB
MD5

450d566cfe8fe664c0164d23d4e6a6d0
SHA1

0870d93d72927c2e88a9011e052cf0212d28d9d4
SHA256

9255110f6bb53baa781cbe6c0cca8a82170dc67012f6ccfadb15702625b98b90
SHA512

afcaeafbbbd3b7dd75a2c7aedd322f9ef6ff5cd98580d72e93a5141fecc2f750436423af7265c66bd047d31cec0b3a48137beba48c487740b31025f0d7eded0f
SSDEEP

3072:gV9nPCPv0dwq36/jh+LAlb4aF+qgtws5hIoX345cPB1nrA14Q7gRl+AXLFqoe4Iu:gVEEqqOlIMb4S5cnk60iyJJ4U1

Score

N/A

Malware Config

Signatures

Files

9255110f6bb53baa781cbe6c0cca8a82170dc67012f6ccfadb15702625b98b90
.dll windows x86

c9cb26c547c5d74e6cf28ec1974c217d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

WSAJoinLeaf
WSAAccept
WSARecv
WSASend
WSAGetOverlappedResult
WSARecvFrom
WSASendTo
WSASocketW
WSASocketA
inet_addr
htonl
WSAGetLastError
ioctlsocket
WSAConnect
gethostname
select
getpeername
getsockname
bind
getsockopt
setsockopt
accept
listen
closesocket
sendto
send
recvfrom
recv
connect
socket
WSAStartup
ntohl
inet_ntoa
htons
ntohs

mswsock

AcceptEx
WSARecvEx
GetAcceptExSockaddrs

kernel32

GetSystemInfo
VirtualQuery
LoadLibraryA
LoadLibraryExA
IsBadReadPtr
FreeLibrary
WriteFile
SetFilePointer
CreateEventA
SetEvent
lstrcmpiA
lstrcpynA
lstrcmpA
VirtualFree
VirtualAlloc
GetStdHandle
SetLastError
FlushInstructionCache
CreateRemoteThread
Module32First
VirtualAllocEx
SetThreadContext
GetThreadContext
TerminateThread
GetExitCodeThread
GetCurrentThreadId
GetCurrentThread
GlobalDeleteAtom
GlobalLock
InterlockedIncrement
InterlockedDecrement
LocalFree
LocalAlloc
TlsAlloc
GlobalUnlock
GlobalHandle
TlsFree
GlobalReAlloc
TlsSetValue
LocalReAlloc
TlsGetValue
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
lstrcatA
GetVersion
SetErrorMode
GlobalFlags
WritePrivateProfileStringA
GetProcessVersion
FlushFileBuffers
VirtualProtect
GetCPInfo
GetOEMCP
RtlUnwind
HeapFree
HeapAlloc
SetStdHandle
GetFileType
GetCommandLineA
ExitProcess
ExitThread
RaiseException
HeapSize
HeapReAlloc
GetACP
LCMapStringA
LCMapStringW
HeapDestroy
HeapCreate
IsBadWritePtr
SetHandleCount
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
IsBadCodePtr
Module32Next
GetCurrentProcess
CreateThread
SetThreadPriority
CreateToolhelp32Snapshot
OpenProcess
GetExitCodeProcess
TerminateProcess
GetModuleHandleA
GetProcAddress
SuspendThread
MultiByteToWideChar
ResumeThread
GetLastError
GetModuleFileNameA
GetVersionExA
OutputDebugStringA
Sleep
OpenMutexA
GetTickCount
ReleaseMutex
CloseHandle
GlobalFree
DeleteCriticalSection
CreateMutexA
InitializeCriticalSection
EnterCriticalSection
GlobalAlloc
LeaveCriticalSection
WideCharToMultiByte
WaitForSingleObject
CreateProcessW
CreateProcessA
lstrlenA
lstrcpyA
WriteProcessMemory
VirtualProtectEx

user32

ClientToScreen
GetDC
ReleaseDC
TabbedTextOutA
DrawTextA
GrayStringA
GetSystemMetrics
GetWindowRect
GetWindowPlacement
IsIconic
SystemParametersInfoA
RegisterWindowMessageA
SetWindowPos
SetWindowLongA
GetWindow
GetForegroundWindow
GetMessagePos
GetMessageTime
RemovePropA
CallWindowProcA
GetPropA
SetPropA
GetClassLongA
DestroyWindow
GetDlgCtrlID
GetWindowTextA
GetDlgItem
GetMenuItemID
GetSubMenu
GetMenuItemCount
GetMenu
RegisterClassA
WinHelpA
GetCapture
GetTopWindow
CopyRect
GetClientRect
AdjustWindowRectEx
SetFocus
GetSysColor
MapWindowPoints
LoadIconA
ShowWindow
UnregisterClassA
GetClassNameA
PtInRect
LoadCursorA
GetSysColorBrush
LoadStringA
DestroyMenu
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
SetCursor
SendMessageA
PostMessageA
EnableWindow
wsprintfA
GetClassInfoA
DefWindowProcA
PostThreadMessageA
CreateWindowExA
SetForegroundWindow
MessageBoxA
PostQuitMessage
SetTimer
SetWindowTextA
UnhookWindowsHookEx
SetWindowsHookExA
CallNextHookEx
KillTimer
WaitMessage
GetMenuCheckMarkDimensions

gdi32

DeleteDC
GetDeviceCaps
GetObjectA
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
SaveDC
RestoreDC
SelectObject
GetStockObject
SetBkColor
SetTextColor
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
DeleteObject
CreateBitmap

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey

comctl32

ord17

ole32

CoGetClassObject
CoCreateInstance

imagehlp

ImageDirectoryEntryToData

wsock32

WSAAsyncSelect
shutdown
WSACleanup
WSASetLastError
gethostbyname

winmm

timeKillEvent
timeSetEvent

Exports

Exports

FNS_AddHost
FNS_EmptyHost
FNS_GameBegin
FNS_GameEnd
FNS_GetDPlaySvrHandle
FNS_GetGamePlayState
FNS_GetLocalGamePort
FNS_GetVersion
FNS_ModifyPlayFlag
FNS_ModifyProxyIp
FNS_ModifySwitchPort
FNS_RemoveHost
FNS_SetCurrentPath
FNS_SetDPlaySvrHandle
FNS_SetData
FNS_SetDataCallbackFunc
FNS_SetGameParam
FNS_SetGamePlayState
FNS_SetGameProcessName
FNS_SetInSameWall
FNS_SetLocalHostInfo
FNS_SetNetCtrlFlag
FNS_SetProxy
FNS_SetRemovedSocket
FNS_SetRoomInfo
FNS_SetSwitchInfo

Sections

.text
Size: 140KB - Virtual size: 138KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Shared
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

c9cb26c547c5d74e6cf28ec1974c217d

Headers

File Characteristics

Imports

ws2_32

mswsock

kernel32

user32

gdi32

winspool.drv

advapi32

comctl32

ole32

imagehlp

wsock32

winmm

Exports

Exports

Sections

.text Size: 140KB - Virtual size: 138KB

.rdata Size: 28KB - Virtual size: 27KB

.data Size: 8KB - Virtual size: 34KB

Shared Size: 16KB - Virtual size: 14KB

.rsrc Size: 8KB - Virtual size: 7KB

.reloc Size: 20KB - Virtual size: 17KB

.rmnet Size: 60KB - Virtual size: 60KB

.text
Size: 140KB - Virtual size: 138KB

.rdata
Size: 28KB - Virtual size: 27KB

.data
Size: 8KB - Virtual size: 34KB

Shared
Size: 16KB - Virtual size: 14KB

.rsrc
Size: 8KB - Virtual size: 7KB

.reloc
Size: 20KB - Virtual size: 17KB

.rmnet
Size: 60KB - Virtual size: 60KB