21b838e96a3c9c70c3f9b30a51c7a626db3ae39b9b1e07177807d8876a69abf5

Sharing

Copy URL Twitter E-mail

General

Target

21b838e96a3c9c70c3f9b30a51c7a626db3ae39b9b1e07177807d8876a69abf5
Size

565KB
MD5

dd7c5acc0e397f8b6c3fc0fef289ee32
SHA1

3524c2342307285f88f86be91c723d3848593b2e
SHA256

21b838e96a3c9c70c3f9b30a51c7a626db3ae39b9b1e07177807d8876a69abf5
SHA512

2140cff3d5d58c2c1156d0c5262d9c773f25a04b1e9a96bde730f442d0c712801f1988a8ced68e4eb01697fceda2e0b071eaa43114b47699fb71d31e63d49008
SSDEEP

12288:c1BnwfaCTx3Q8i7q5qUjGOmECwcu0r3w34DZR:cegDOmE9oDZR

Score

N/A

Malware Config

Signatures

Files

21b838e96a3c9c70c3f9b30a51c7a626db3ae39b9b1e07177807d8876a69abf5
.dll windows x86

179783ad826f03b9a60a343055ca9838

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

sdl2

SDL_malloc
SDL_realloc
SDL_free
SDL_memset
SDL_memcpy
SDL_strlen
SDL_SetError
SDL_Error
SDL_RWFromFile
SDL_RWsize
SDL_RWseek
SDL_RWtell
SDL_RWread
SDL_RWclose
SDL_CreateRGBSurfaceWithFormatFrom
SDL_FreeSurface
SDL_SetColorKey
SDL_SetSurfaceBlendMode
SDL_HasSSE2

libfreetype-6

FT_Done_Glyph
FT_Outline_Transform
FT_Outline_Translate
FT_MulFix
FT_Get_Char_Index
FT_Set_Charmap
FT_Get_Kerning
FT_Render_Glyph
FT_Load_Glyph
FT_Set_Char_Size
FT_Select_Size
FT_Done_Face
FT_Open_Face
FT_Done_FreeType
FT_Init_FreeType
FT_Glyph_To_Bitmap
FT_Stroker_New
FT_Stroker_Set
FT_Stroker_Done
FT_Glyph_Stroke
FT_Get_Glyph

libharfbuzz-0

hb_font_destroy
hb_buffer_create
hb_buffer_destroy
hb_buffer_set_direction
hb_buffer_set_script
hb_buffer_add_utf8
hb_buffer_get_glyph_infos
hb_buffer_get_glyph_positions
hb_shape
hb_ft_font_create
hb_ft_font_set_load_flags
hb_ft_font_changed

kernel32

InterlockedPushEntrySList
DecodePointer
WriteConsoleW
CloseHandle
CreateFileW
OutputDebugStringW
ReadConsoleW
ReadFile
SetFilePointerEx
GetFileSizeEx
GetConsoleMode
GetConsoleOutputCP
WriteFile
FlushFileBuffers
SetStdHandle
HeapReAlloc
HeapSize
GetStringTypeW
SetConsoleCtrlHandler
GetFileType
GetStdHandle
GetProcessHeap
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
MultiByteToWideChar
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
HeapFree
HeapAlloc
GetCurrentThread
GetModuleFileNameW
GetModuleHandleExW
ExitProcess
RaiseException
EncodePointer
LoadLibraryExW
GetProcAddress
FreeLibrary
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
TlsSetValue
InterlockedFlushSList
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsFree

Exports

Exports

TTF_ByteSwappedUNICODE
TTF_CloseFont
TTF_FontAscent
TTF_FontDescent
TTF_FontFaceFamilyName
TTF_FontFaceIsFixedWidth
TTF_FontFaceStyleName
TTF_FontFaces
TTF_FontHeight
TTF_FontLineSkip
TTF_GetFontHinting
TTF_GetFontKerning
TTF_GetFontKerningSize
TTF_GetFontKerningSizeGlyphs
TTF_GetFontKerningSizeGlyphs32
TTF_GetFontOutline
TTF_GetFontSDF
TTF_GetFontStyle
TTF_GlyphIsProvided
TTF_GlyphIsProvided32
TTF_GlyphMetrics
TTF_GlyphMetrics32
TTF_Init
TTF_Linked_Version
TTF_MeasureText
TTF_MeasureUNICODE
TTF_MeasureUTF8
TTF_OpenFont
TTF_OpenFontDPI
TTF_OpenFontDPIRW
TTF_OpenFontIndex
TTF_OpenFontIndexDPI
TTF_OpenFontIndexDPIRW
TTF_OpenFontIndexRW
TTF_OpenFontRW
TTF_Quit
TTF_RenderGlyph32_Blended
TTF_RenderGlyph32_Shaded
TTF_RenderGlyph32_Solid
TTF_RenderGlyph_Blended
TTF_RenderGlyph_Shaded
TTF_RenderGlyph_Solid
TTF_RenderText_Blended
TTF_RenderText_Blended_Wrapped
TTF_RenderText_Shaded
TTF_RenderText_Shaded_Wrapped
TTF_RenderText_Solid
TTF_RenderText_Solid_Wrapped
TTF_RenderUNICODE_Blended
TTF_RenderUNICODE_Blended_Wrapped
TTF_RenderUNICODE_Shaded
TTF_RenderUNICODE_Shaded_Wrapped
TTF_RenderUNICODE_Solid
TTF_RenderUNICODE_Solid_Wrapped
TTF_RenderUTF8_Blended
TTF_RenderUTF8_Blended_Wrapped
TTF_RenderUTF8_Shaded
TTF_RenderUTF8_Shaded_Wrapped
TTF_RenderUTF8_Solid
TTF_RenderUTF8_Solid_Wrapped
TTF_SetDirection
TTF_SetFontHinting
TTF_SetFontKerning
TTF_SetFontOutline
TTF_SetFontSDF
TTF_SetFontSize
TTF_SetFontSizeDPI
TTF_SetFontStyle
TTF_SetScript
TTF_SizeText
TTF_SizeUNICODE
TTF_SizeUTF8
TTF_WasInit

Sections

.text
Size: 383KB - Virtual size: 383KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.00cfg
Size: 512B - Virtual size: 265B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

179783ad826f03b9a60a343055ca9838

Headers

DLL Characteristics

File Characteristics

Imports

sdl2

libfreetype-6

libharfbuzz-0

kernel32

Exports

Exports

Sections

.text Size: 383KB - Virtual size: 383KB

.rdata Size: 50KB - Virtual size: 50KB

.data Size: 4KB - Virtual size: 9KB

.idata Size: 5KB - Virtual size: 4KB

.00cfg Size: 512B - Virtual size: 265B

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 10KB - Virtual size: 10KB

.text Size: 108KB - Virtual size: 108KB

.text
Size: 383KB - Virtual size: 383KB

.rdata
Size: 50KB - Virtual size: 50KB

.data
Size: 4KB - Virtual size: 9KB

.idata
Size: 5KB - Virtual size: 4KB

.00cfg
Size: 512B - Virtual size: 265B

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 10KB - Virtual size: 10KB

.text
Size: 108KB - Virtual size: 108KB