1f72888004b8e959b7cb42cf7837548fbc3c53f9f8fcd294aabf717c399a9d24

Sharing

Copy URL Twitter E-mail

General

Target

1f72888004b8e959b7cb42cf7837548fbc3c53f9f8fcd294aabf717c399a9d24
Size

408KB
MD5

6783fb34ed52dcbd8789851b69271a20
SHA1

3226254252ec16a59c37a61b682ce39adbca1ae3
SHA256

1f72888004b8e959b7cb42cf7837548fbc3c53f9f8fcd294aabf717c399a9d24
SHA512

01cb042217c1e4b1473f9b0a2c84affc89254a81945d9cf332642d68a28ed3a56e2e27c8ab8abe4ea33c00c30402960dadbae953f6bd960c8e054f4392e2a4c5
SSDEEP

6144:/TCZmfzVjRc+mgZB4w2SnEsn1Oi7vwy+Kd6nqWfpft9SzdV3:+mfZxhBIs0ckKsTr+V3

Score

N/A

Malware Config

Signatures

Files

1f72888004b8e959b7cb42cf7837548fbc3c53f9f8fcd294aabf717c399a9d24
.dll windows x86

44fe17a46a544a52e910906fbdf020a1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

d3dx9_43

D3DXSaveSurfaceToFileA
D3DXCreateEffectFromFileW

kernel32

TlsFree
ExitProcess
FreeLibrary
GetSystemDirectoryA
GetProcAddress
LoadLibraryA
VirtualProtect
GetCurrentDirectoryA
HeapSize
GetCurrentThreadId
DecodePointer
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
GetLastError
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
FlushFileBuffers
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
RtlUnwind
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoW
HeapFree
CloseHandle
TlsAlloc
TlsGetValue
TlsSetValue
InterlockedIncrement
GetModuleHandleW
SetLastError
InterlockedDecrement
Sleep
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
WriteConsoleW
MultiByteToWideChar
SetStdHandle
GetModuleFileNameW
CreateFileA
HeapAlloc
HeapReAlloc
LoadLibraryW
LCMapStringW
GetStringTypeW
IsProcessorFeaturePresent
CreateFileW
SetEndOfFile
GetProcessHeap
ReadFile

user32

GetAsyncKeyState

Exports

Exports

D3DPERF_BeginEvent
D3DPERF_EndEvent
D3DPERF_GetStatus
D3DPERF_QueryRepeatFrame
D3DPERF_SetMarker
D3DPERF_SetOptions
D3DPERF_SetRegion
Direct3DCreate9

Sections

.text
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 333KB - Virtual size: 336KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

44fe17a46a544a52e910906fbdf020a1

Headers

DLL Characteristics

File Characteristics

Imports

d3dx9_43

kernel32

user32

Exports

Exports

Sections

.text Size: 53KB - Virtual size: 53KB

.rdata Size: 11KB - Virtual size: 10KB

.data Size: 4KB - Virtual size: 13KB

.rsrc Size: 512B - Virtual size: 436B

.reloc Size: 4KB - Virtual size: 4KB

.text Size: 333KB - Virtual size: 336KB

.text
Size: 53KB - Virtual size: 53KB

.rdata
Size: 11KB - Virtual size: 10KB

.data
Size: 4KB - Virtual size: 13KB

.rsrc
Size: 512B - Virtual size: 436B

.reloc
Size: 4KB - Virtual size: 4KB

.text
Size: 333KB - Virtual size: 336KB