3b8f3821484a2402d7ba704742effa4ded240b419fc13941197e3e718391dd2f

Sharing

Copy URL Twitter E-mail

General

Target

3b8f3821484a2402d7ba704742effa4ded240b419fc13941197e3e718391dd2f
Size

326KB
MD5

672455f533292d44c73389bfdbbc87db
SHA1

08269d48a7d5ec8dc2004975db6a25eba4183370
SHA256

3b8f3821484a2402d7ba704742effa4ded240b419fc13941197e3e718391dd2f
SHA512

eb69513590fbd66a6be1f8eac6050752475053fcf733e1500af7d0da09033a10df12afe05262a75991da7a3c6357d42874d5076ceaf862926aeb7991afbaf965
SSDEEP

6144:IgHkFFeGHaCA8tF4vYfeHKBPWCpVSbe/fu+diZjT:RE7xYbKBPfjKsfHdiZ3

Score

N/A

Malware Config

Signatures

Files

3b8f3821484a2402d7ba704742effa4ded240b419fc13941197e3e718391dd2f
.dll windows x86

192fa4a585296a740bab8932c36090db

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

WOWShellExecute
SHGetSpecialFolderLocation
SHExtractIconsW
DragQueryFileAorW
CommandLineToArgvW

kernel32

CancelDeviceWakeupRequest
DeleteTimerQueueTimer
DisableThreadLibraryCalls
EnterCriticalSection
ExitProcess
FileTimeToSystemTime
FindResourceA
FlushInstructionCache
FreeLibrary
GetACP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetNumberOfConsoleInputEvents
GetProcessPriorityBoost
GetProcessVersion
GetQueuedCompletionStatus
GetSystemTimeAsFileTime
GetTickCount
GetVersionExA
GlobalAlloc
GlobalFree
GlobalHandle
GlobalLock
GlobalUnfix
InitializeCriticalSection
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsDBCSLeadByte
IsProcessorFeaturePresent
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
Module32First
MultiByteToWideChar
ProcessIdToSessionId
QueryPerformanceCounter
SetHandleInformation
SetPriorityClass
SizeofResource
VirtualAlloc
VirtualFree
VirtualProtect
WaitForMultipleObjectsEx
WideCharToMultiByte
lstrcmpA
lstrcmpiA
lstrcpynA
lstrlenA
HeapFree

dsound

ord10
ord1
ord11

dinput

DirectInputCreateEx

ws2_32

WSARecvDisconnect

Exports

Exports

AssembleShaderFromFileW
CheckTextureRequirements
ComputeIMTFromPerTexelSignal
CreateEffectCompilerFromResourceA
CreateMeshFVF
FrameNumNamedMatrices
GetShaderInputSemantics
MatrixLookAtRH
SetComment
Vec3Normalize
Vec3TransformCoordArray
Vec4Hermite

Sections

.text
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 155KB - Virtual size: 154KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

192fa4a585296a740bab8932c36090db

Headers

File Characteristics

Imports

shell32

kernel32

dsound

dinput

ws2_32

Exports

Exports

Sections

.text Size: 54KB - Virtual size: 54KB

.rdata Size: 155KB - Virtual size: 154KB

.data Size: 64KB - Virtual size: 64KB

.rsrc Size: 47KB - Virtual size: 47KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 54KB - Virtual size: 54KB

.rdata
Size: 155KB - Virtual size: 154KB

.data
Size: 64KB - Virtual size: 64KB

.rsrc
Size: 47KB - Virtual size: 47KB

.reloc
Size: 4KB - Virtual size: 3KB