0d1232b627800924a25079fd031f9597a8eacc199987f5c477919a5adadaf42d

Sharing

Copy URL Twitter E-mail

General

Target

0d1232b627800924a25079fd031f9597a8eacc199987f5c477919a5adadaf42d
Size

268KB
MD5

1d54820c94f0d80f3833c9adeaf9c6bf
SHA1

bb67ffdba2c3a5eb63a6c0a4f54abf9ff894ceac
SHA256

0d1232b627800924a25079fd031f9597a8eacc199987f5c477919a5adadaf42d
SHA512

031e5e542ac879e71c0b000a22316a38185eb4e2f042e378a8aab46536bd2b9b67a2d71905a439b88f3dc8ef49bd9b1e9cc706d6dafdadea4bc16a48c975e542
SSDEEP

6144:HUDAnHBYASGYzH8geeNMPaZRupn+aZGVXpEqI2JX6gAy/Awo:HUUnNnYbEc8B+XLEqIeX6gAy/Y

Score

N/A

Malware Config

Signatures

Files

0d1232b627800924a25079fd031f9597a8eacc199987f5c477919a5adadaf42d
.dll windows x86

5ad4fbb3f4749dee1e5b16ef20700cb0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

lhmultiplayerd

?VDecode@LHNetEvent@@QAA?AW4LH_RETURN@@JPAULHNetMessageFormatDescriptor@@ZZ
?VCreate@LHNetEvent@@SAPAV1@JPAULHNetMessageFormatDescriptor@@ZZ

kernel32

CloseHandle
ExitProcess
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapAlloc
EnterCriticalSection
LeaveCriticalSection
InterlockedDecrement
InterlockedIncrement
GetTimeZoneInformation
GetSystemTime
GetLocalTime
WideCharToMultiByte
HeapFree
GetLastError
GetCommandLineA
GetVersion
InitializeCriticalSection
DeleteCriticalSection
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
FlushFileBuffers
WriteFile
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetEnvironmentStrings
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
LCMapStringA
LCMapStringW
ReadFile
SetFilePointer
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStringsW
RtlUnwind
SetStdHandle
CreateFileA
GetCPInfo
LoadLibraryA
GetACP
GetOEMCP
SetEndOfFile
CompareStringA
CompareStringW
SetEnvironmentVariableA

Exports

Exports

??0CLanguage@@QAE@XZ
??4CLanguage@@QAEAAV0@ABV0@@Z
?fnLanguage@@YAHXZ
?nLanguage@@3HA
Initialise
LookIn
UnInitialise

Sections

.text
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 196KB - Virtual size: 196KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

5ad4fbb3f4749dee1e5b16ef20700cb0

Headers

File Characteristics

Imports

lhmultiplayerd

kernel32

Exports

Exports

Sections

.text Size: 48KB - Virtual size: 46KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 8KB - Virtual size: 12KB

.reloc Size: 8KB - Virtual size: 4KB

.text Size: 196KB - Virtual size: 196KB

.text
Size: 48KB - Virtual size: 46KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 8KB - Virtual size: 12KB

.reloc
Size: 8KB - Virtual size: 4KB

.text
Size: 196KB - Virtual size: 196KB