8e08884960079016bafc5031f470f8072e52c0019d2f4cd431b8ba7f3e300739

Sharing

Copy URL Twitter E-mail

General

Target

8e08884960079016bafc5031f470f8072e52c0019d2f4cd431b8ba7f3e300739
Size

437KB
MD5

4e34f56026d99420fdbfd07e6266c5d0
SHA1

6fcdf8d248a4c3bdd21fbb16cac983d5c64a4d4b
SHA256

8e08884960079016bafc5031f470f8072e52c0019d2f4cd431b8ba7f3e300739
SHA512

0716d9e146bb2024f336fd57b820fcac2f9629cc467e5fb330f838e64a552e54be5012cca2bd07a57d91bb3ed9f4e10284487a105fdb000883bb7f9dd68ab510
SSDEEP

12288:2rtry6t+Mf+wmnrR1JNhlZazHbPcz9Keg0RFecMcmVlUkK+uZWLe/581BbUWkNk2:l81tUWkNgid

Score

N/A

Malware Config

Signatures

Files

8e08884960079016bafc5031f470f8072e52c0019d2f4cd431b8ba7f3e300739
.dll windows x86

ad5f90933e0c86ac983e3720df442f7c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegQueryValueExA
RegCreateKeyExA
RegOpenKeyExA
RegCloseKey

ws2_32

sendto
WSAStartup
inet_addr
recvfrom
WSAGetLastError
htonl
setsockopt
htons
recv
bind
socket
closesocket
send

user32

MessageBoxA
MessageBoxW

kernel32

GetProcessHeap
SetEndOfFile
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
InitializeCriticalSectionAndSpinCount
GetLocaleInfoA
GetCurrentThread
GetCommandLineA
InitializeCriticalSection
LeaveCriticalSection
CreateDirectoryA
GetLastError
GetProcAddress
EnterCriticalSection
GetLocalTime
GetModuleHandleA
LoadLibraryExA
DeleteCriticalSection
ExitProcess
CreateFileA
GetVolumeInformationA
GetSystemDirectoryA
LoadLibraryA
GetSystemInfo
GetModuleFileNameA
VirtualProtect
CreateThread
GetTickCount
TerminateThread
GetCurrentThreadId
GetPrivateProfileStringA
WideCharToMultiByte
MultiByteToWideChar
FreeLibrary
SetFileAttributesA
HeapFree
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapReAlloc
GetSystemTimeAsFileTime
DeleteFileA
RaiseException
RtlUnwind
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapCreate
HeapDestroy
VirtualFree
VirtualAlloc
Sleep
WriteFile
GetStdHandle
HeapSize
GetConsoleCP
GetConsoleMode
CloseHandle
SetStdHandle
GetFileType
SetFilePointer
SetHandleCount
GetStartupInfoA
ReadFile
FlushFileBuffers
LCMapStringA
LCMapStringW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetStringTypeA
GetStringTypeW

Exports

Exports

CreateInterface
GetSteamApps
GetSteamFriends
GetSteamGameServer
GetSteamMasterServerUpdater
GetSteamMatchMaking
GetSteamMatchMakingServers
GetSteamRemoteStorage
GetSteamUtils
PostCallback
Steam_BConnected
Steam_BGetCallback
Steam_BLoggedOn
Steam_BReleaseSteamPipe
Steam_ConnectToGlobalUser
Steam_CreateGlobalUser
Steam_CreateLocalUser
Steam_CreateSteamPipe
Steam_FreeLastCallback
Steam_GSBLoggedOn
Steam_GSBSecure
Steam_GSGetSteam2GetEncryptionKeyToSendToNewClient
Steam_GSGetSteamID
Steam_GSLogOff
Steam_GSLogOn
Steam_GSRemoveUserConnect
Steam_GSSendSteam2UserConnect
Steam_GSSendSteam3UserConnect
Steam_GSSendUserDisconnect
Steam_GSSendUserStatusResponse
Steam_GSSetServerType
Steam_GSSetSpawnCount
Steam_GSUpdateStatus
Steam_GetGSHandle
Steam_InitiateGameConnection
Steam_LogOff
Steam_LogOn
Steam_ReleaseUser
Steam_SetLocalIPBinding
Steam_TerminateGameConnection

Sections

.text
Size: 231KB - Virtual size: 230KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 70KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 50KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 54KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ad5f90933e0c86ac983e3720df442f7c

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

ws2_32

user32

kernel32

Exports

Exports

Sections

.text Size: 231KB - Virtual size: 230KB

.rdata Size: 70KB - Virtual size: 69KB

.data Size: 50KB - Virtual size: 62KB

.rsrc Size: 512B - Virtual size: 436B

.reloc Size: 31KB - Virtual size: 30KB

.rmnet Size: 54KB - Virtual size: 56KB

.text
Size: 231KB - Virtual size: 230KB

.rdata
Size: 70KB - Virtual size: 69KB

.data
Size: 50KB - Virtual size: 62KB

.rsrc
Size: 512B - Virtual size: 436B

.reloc
Size: 31KB - Virtual size: 30KB

.rmnet
Size: 54KB - Virtual size: 56KB