fe355c1aeb3f5cb0795243c6bcee975684c41537f4032afb8ddd6cd6775c772b

Sharing

Copy URL Twitter E-mail

General

Target

fe355c1aeb3f5cb0795243c6bcee975684c41537f4032afb8ddd6cd6775c772b
Size

440KB
MD5

1231e17f765bb5302d6af867e7e57620
SHA1

a5c52f386ac25904edcfa887fd83a32ea22a5029
SHA256

fe355c1aeb3f5cb0795243c6bcee975684c41537f4032afb8ddd6cd6775c772b
SHA512

a92e85d1bf13500c086fe82fceb395a84ac06341e6dcccf967e023f485f2b866272cbd527e15d433a816a8a6ec69d086176f975a20d26bca0cc59e116d1072bc
SSDEEP

12288:Hrtry6t+Mf+wmnrR1JNhlZazHbPcz9Keg0RFecMcmVlUkK+uZWLe/581BbUWnNk5:y81tUWnN

Score

N/A

Malware Config

Signatures

Files

fe355c1aeb3f5cb0795243c6bcee975684c41537f4032afb8ddd6cd6775c772b
.dll windows x86

ad5f90933e0c86ac983e3720df442f7c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegQueryValueExA
RegCreateKeyExA
RegOpenKeyExA
RegCloseKey

ws2_32

sendto
WSAStartup
inet_addr
recvfrom
WSAGetLastError
htonl
setsockopt
htons
recv
bind
socket
closesocket
send

user32

MessageBoxA
MessageBoxW

kernel32

GetProcessHeap
SetEndOfFile
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
InitializeCriticalSectionAndSpinCount
GetLocaleInfoA
GetCurrentThread
GetCommandLineA
InitializeCriticalSection
LeaveCriticalSection
CreateDirectoryA
GetLastError
GetProcAddress
EnterCriticalSection
GetLocalTime
GetModuleHandleA
LoadLibraryExA
DeleteCriticalSection
ExitProcess
CreateFileA
GetVolumeInformationA
GetSystemDirectoryA
LoadLibraryA
GetSystemInfo
GetModuleFileNameA
VirtualProtect
CreateThread
GetTickCount
TerminateThread
GetCurrentThreadId
GetPrivateProfileStringA
WideCharToMultiByte
MultiByteToWideChar
FreeLibrary
SetFileAttributesA
HeapFree
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapReAlloc
GetSystemTimeAsFileTime
DeleteFileA
RaiseException
RtlUnwind
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapCreate
HeapDestroy
VirtualFree
VirtualAlloc
Sleep
WriteFile
GetStdHandle
HeapSize
GetConsoleCP
GetConsoleMode
CloseHandle
SetStdHandle
GetFileType
SetFilePointer
SetHandleCount
GetStartupInfoA
ReadFile
FlushFileBuffers
LCMapStringA
LCMapStringW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetStringTypeA
GetStringTypeW

Exports

Exports

CreateInterface
GetSteamApps
GetSteamFriends
GetSteamGameServer
GetSteamMasterServerUpdater
GetSteamMatchMaking
GetSteamMatchMakingServers
GetSteamRemoteStorage
GetSteamUtils
PostCallback
Steam_BConnected
Steam_BGetCallback
Steam_BLoggedOn
Steam_BReleaseSteamPipe
Steam_ConnectToGlobalUser
Steam_CreateGlobalUser
Steam_CreateLocalUser
Steam_CreateSteamPipe
Steam_FreeLastCallback
Steam_GSBLoggedOn
Steam_GSBSecure
Steam_GSGetSteam2GetEncryptionKeyToSendToNewClient
Steam_GSGetSteamID
Steam_GSLogOff
Steam_GSLogOn
Steam_GSRemoveUserConnect
Steam_GSSendSteam2UserConnect
Steam_GSSendSteam3UserConnect
Steam_GSSendUserDisconnect
Steam_GSSendUserStatusResponse
Steam_GSSetServerType
Steam_GSSetSpawnCount
Steam_GSUpdateStatus
Steam_GetGSHandle
Steam_InitiateGameConnection
Steam_LogOff
Steam_LogOn
Steam_ReleaseUser
Steam_SetLocalIPBinding
Steam_TerminateGameConnection

Sections

.text
Size: 231KB - Virtual size: 230KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 70KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 50KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 56KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ad5f90933e0c86ac983e3720df442f7c

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

ws2_32

user32

kernel32

Exports

Exports

Sections

.text Size: 231KB - Virtual size: 230KB

.rdata Size: 70KB - Virtual size: 69KB

.data Size: 50KB - Virtual size: 62KB

.rsrc Size: 512B - Virtual size: 436B

.reloc Size: 31KB - Virtual size: 30KB

.rmnet Size: 56KB - Virtual size: 60KB

.text
Size: 231KB - Virtual size: 230KB

.rdata
Size: 70KB - Virtual size: 69KB

.data
Size: 50KB - Virtual size: 62KB

.rsrc
Size: 512B - Virtual size: 436B

.reloc
Size: 31KB - Virtual size: 30KB

.rmnet
Size: 56KB - Virtual size: 60KB