395fe17b22c7f434ce6eba63a722a8d12ae4fb0fa075d6b8f92813845a02e9e8

Sharing

Copy URL Twitter E-mail

General

Target

395fe17b22c7f434ce6eba63a722a8d12ae4fb0fa075d6b8f92813845a02e9e8
Size

836KB
MD5

29e86e0401e44ceb6ba2112d02e1c3e0
SHA1

e9669ade08121099811b2ad5c30d742cf4a64e19
SHA256

395fe17b22c7f434ce6eba63a722a8d12ae4fb0fa075d6b8f92813845a02e9e8
SHA512

3b972297a589a228f54d717fc4979e12c3b7521513855870be9f3f6f5db2311929f0722002e901ce2776618ffb47b1f0c8341a87ecf4cf82d7050be9b0aa213d
SSDEEP

12288:9BaE8tbNyE9bEjOAB4+94fkVW0b8uorc8bOvj+d48jqj1vK6KlJQVjV7W5jqQCgE:PaE8tJyZj/ezaP/BB5/sm6tYdfhYAKs

Score

N/A

Malware Config

Signatures

Files

395fe17b22c7f434ce6eba63a722a8d12ae4fb0fa075d6b8f92813845a02e9e8
.dll windows x86

fddc0128aefa1d709c61c7d7e49ffbe2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualQuery
HeapAlloc
GetProcessHeap
GetModuleFileNameA
CloseHandle
FlushFileBuffers
ReadFile
GetLocaleInfoW
SetConsoleCtrlHandler
SetStdHandle
IsBadCodePtr
IsBadWritePtr
SetUnhandledExceptionFilter
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetOEMCP
GetACP
InterlockedExchange
SetFilePointer
GetSystemTimeAsFileTime
GetCurrentProcessId
WideCharToMultiByte
MultiByteToWideChar
GetProcAddress
GetModuleHandleA
LoadLibraryA
FreeLibrary
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
ExitProcess
TerminateProcess
GetCurrentProcess
IsBadReadPtr
GetTimeFormatA
GetDateFormatA
GetCurrentThreadId
GetCommandLineA
GetVersionExA
RtlUnwind
GetDriveTypeA
GetCurrentDirectoryA
GetFullPathNameA
FatalAppExitA
EnterCriticalSection
TlsAlloc
SetLastError
GetLastError
GetCurrentThread
TlsFree
TlsSetValue
TlsGetValue
RaiseException
GetTimeZoneInformation
VirtualProtect
VirtualAlloc
GetSystemInfo
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
UnhandledExceptionFilter
WriteFile
GetCPInfo
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
QueryPerformanceCounter
GetTickCount

tier0

?Lock@CThreadMutex@@QAEXXZ
?Lock@CThreadMutex@@QBEXXZ
?DevMsg@@YAXPBDZZ
MemAllocScratch
MemFreeScratch
DevMsg
Error
g_pMemAlloc
g_pVCR
Msg
Warning

vstdlib

RandomFloat
RandomInt
Q_strncpy
Q_snprintf
KeyValuesSystem
CommandLine
Q_strnicmp
Q_strncat
?Q_stristr@@YAPBDPBD0@Z
Q_IsAbsolutePath
Q_strnistr
Q_strncmp
Q_vsnprintf
Q_strnchr

steam

SteamGetEncryptedUserIDTicket
SteamGetUser

Exports

Exports

CreateInterface

Sections

.text
Size: 612KB - Virtual size: 611KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 124KB - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 72KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

fddc0128aefa1d709c61c7d7e49ffbe2

Headers

File Characteristics

Imports

kernel32

tier0

vstdlib

steam

Exports

Exports

Sections

.text Size: 612KB - Virtual size: 611KB

.rdata Size: 124KB - Virtual size: 121KB

.data Size: 12KB - Virtual size: 49KB

.reloc Size: 72KB - Virtual size: 70KB

.rmnet Size: 12KB - Virtual size: 12KB

.text
Size: 612KB - Virtual size: 611KB

.rdata
Size: 124KB - Virtual size: 121KB

.data
Size: 12KB - Virtual size: 49KB

.reloc
Size: 72KB - Virtual size: 70KB

.rmnet
Size: 12KB - Virtual size: 12KB