11d7e5a042a824b49e51f774ce86c014e6ae465966f9eb1d943dcfc6ae68faa9

Sharing

Copy URL Twitter E-mail

General

Target

11d7e5a042a824b49e51f774ce86c014e6ae465966f9eb1d943dcfc6ae68faa9
Size

227KB
MD5

a01708bc71a2ccb31e006409e68b1e2e
SHA1

41eb196943c5077500a79dfb4da50d796bf84e76
SHA256

11d7e5a042a824b49e51f774ce86c014e6ae465966f9eb1d943dcfc6ae68faa9
SHA512

ceb7df73802a4348c473a871a6c92dae5bcd114eed0839972d77020de374ab1a35017d3c590dc824cc7a9d9b3dc379131983bbd73203b31b6ce73baa80aedc84
SSDEEP

6144:oOK6fgeeNMPaZRupn+aZGVXpEqI2JX6gAy/Aw3:CEc8B+XLEqIeX6gAy/n

Score

N/A

Malware Config

Signatures

Files

11d7e5a042a824b49e51f774ce86c014e6ae465966f9eb1d943dcfc6ae68faa9
.dll windows x86

df55d0ac3bfd22fd8cca2144bab75fe6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ot11-openthreads

??EAtomic@OpenThreads@@QAEIXZ

osg62-osg

?asSwitch@Node@osg@@UAEPAVSwitch@2@XZ
?asSwitch@Node@osg@@UBEPBVSwitch@2@XZ
?asTransform@Node@osg@@UAEPAVTransform@2@XZ
?asTransform@Node@osg@@UBEPBVTransform@2@XZ
?asGroup@Group@osg@@UAEPAV12@XZ
?asGroup@Group@osg@@UBEPBV12@XZ
?releaseGLObjects@Group@osg@@UBEXPAVState@2@@Z
?resizeGLObjectBuffers@Group@osg@@UAEXI@Z
?computeDataVariance@Object@osg@@UAEXXZ
?setThreadSafeRefUnref@Group@osg@@UAEX_N@Z
?setThreadSafeRefUnref@Referenced@osg@@UAEX_N@Z
?traverse@Group@osg@@UAEXAAVNodeVisitor@2@@Z
?childInserted@Group@osg@@MAEXI@Z
?childRemoved@Group@osg@@MAEXII@Z
?setChild@Group@osg@@UAE_NIPAVNode@2@@Z
?replaceChild@Group@osg@@UAE_NPAVNode@2@0@Z
?removeChildren@Group@osg@@UAE_NII@Z
?insertChild@Group@osg@@UAE_NIPAVNode@2@@Z
?addChild@Group@osg@@UAE_NPAVNode@2@@Z
?computeBound@Group@osg@@UBE?AV?$BoundingSphereImpl@VVec3f@osg@@@2@XZ
?ascend@Node@osg@@UAEXAAVNodeVisitor@2@@Z
?asGeode@Node@osg@@UAEPAVGeode@2@XZ
?unref@Referenced@osg@@QBEXXZ
?asGeode@Node@osg@@UBEPBVGeode@2@XZ

osg62-osgdb

?getStr@Field@osgDB@@QBEPBDXZ
??YFieldReaderIterator@osgDB@@QAEAAV01@H@Z
?getInt@Field@osgDB@@QBE_NAAH@Z
?matchWord@Field@osgDB@@QBE_NPBD@Z
??AFieldReaderIterator@osgDB@@QAEAAVField@1@H@Z
?addDotOsgWrapper@Registry@osgDB@@QAEXPAVDotOsgWrapper@2@@Z
??0DotOsgWrapper@osgDB@@QAE@PAVObject@osg@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@1P6A_NAAV23@AAVInput@1@@ZP6A_NABV23@AAVOutput@1@@ZW4ReadWriteMode@01@@Z
?instance@Registry@osgDB@@SAPAV12@_N@Z
??1DotOsgWrapper@osgDB@@MAE@XZ
?removeDotOsgWrapper@Registry@osgDB@@QAEXPAVDotOsgWrapper@2@@Z
?indent@Output@osgDB@@QAEAAV12@XZ
?getFloat@Field@osgDB@@QBE_NAAM@Z
??EFieldReaderIterator@osgDB@@QAEAAV01@XZ
?getNoNestedBrackets@Field@osgDB@@QAEHXZ
?matchSequence@FieldReaderIterator@osgDB@@QAE_NPBD@Z
?moveOut@Output@osgDB@@QAEXXZ
?moveIn@Output@osgDB@@QAEXXZ
?isString@Field@osgDB@@QBE_NXZ

osg62-osgfx

?isSameKindAs@MultiTextureControl@osgFX@@UBE_NPBVObject@osg@@@Z
?getOutlineLineWidth@Cartoon@osgFX@@QBEMXZ
?className@MultiTextureControl@osgFX@@UBEPBDXZ
?accept@MultiTextureControl@osgFX@@UAEXAAVNodeVisitor@osg@@@Z
??1MultiTextureControl@osgFX@@MAE@XZ
?setColor@Outline@osgFX@@QAEXABVVec4f@osg@@@Z
?setWidth@Outline@osgFX@@QAEXM@Z
??0Outline@osgFX@@QAE@XZ
?setOutlineColor@Cartoon@osgFX@@QAEXABVVec4f@osg@@@Z
?clone@Outline@osgFX@@UBEPAVObject@osg@@ABVCopyOp@4@@Z
?isSameKindAs@Outline@osgFX@@UBE_NPBVObject@osg@@@Z
?libraryName@Outline@osgFX@@UBEPBDXZ
?className@Outline@osgFX@@UBEPBDXZ
?accept@Outline@osgFX@@UAEXAAVNodeVisitor@osg@@@Z
?effectName@Outline@osgFX@@UBEPBDXZ
?effectDescription@Outline@osgFX@@UBEPBDXZ
?effectAuthor@Outline@osgFX@@UBEPBDXZ
?define_techniques@Outline@osgFX@@MAE_NXZ
??1Effect@osgFX@@MAE@XZ
??_7Outline@osgFX@@6B@
?setWireframeLineWidth@Scribe@osgFX@@QAEXM@Z
?setWireframeColor@Scribe@osgFX@@QAEXABVVec4f@osg@@@Z
?getWireframeLineWidth@Scribe@osgFX@@QBEMXZ
?getWireframeColor@Scribe@osgFX@@QBEABVVec4f@osg@@XZ
??0Scribe@osgFX@@QAE@XZ
?cloneType@Scribe@osgFX@@UBEPAVObject@osg@@XZ
?clone@Scribe@osgFX@@UBEPAVObject@osg@@ABVCopyOp@4@@Z
?isSameKindAs@Scribe@osgFX@@UBE_NPBVObject@osg@@@Z
?libraryName@Scribe@osgFX@@UBEPBDXZ
?className@Scribe@osgFX@@UBEPBDXZ
?accept@Scribe@osgFX@@UAEXAAVNodeVisitor@osg@@@Z
?effectName@Scribe@osgFX@@UBEPBDXZ
?effectDescription@Scribe@osgFX@@UBEPBDXZ
?effectAuthor@Scribe@osgFX@@UBEPBDXZ
?define_techniques@Scribe@osgFX@@MAE_NXZ
??1Scribe@osgFX@@MAE@XZ
??0SpecularHighlights@osgFX@@QAE@XZ
?cloneType@SpecularHighlights@osgFX@@UBEPAVObject@osg@@XZ
?clone@SpecularHighlights@osgFX@@UBEPAVObject@osg@@ABVCopyOp@4@@Z
?isSameKindAs@SpecularHighlights@osgFX@@UBE_NPBVObject@osg@@@Z
?libraryName@SpecularHighlights@osgFX@@UBEPBDXZ
?clone@MultiTextureControl@osgFX@@UBEPAVObject@osg@@ABVCopyOp@4@@Z
?accept@SpecularHighlights@osgFX@@UAEXAAVNodeVisitor@osg@@@Z
?effectName@SpecularHighlights@osgFX@@UBEPBDXZ
?effectDescription@SpecularHighlights@osgFX@@UBEPBDXZ
?effectAuthor@SpecularHighlights@osgFX@@UBEPBDXZ
?define_techniques@SpecularHighlights@osgFX@@MAE_NXZ
??_7SpecularHighlights@osgFX@@6B@
?setOutlineLineWidth@Cartoon@osgFX@@QAEXM@Z
??1BumpMapping@osgFX@@MAE@XZ
?define_techniques@BumpMapping@osgFX@@MAE_NXZ
?setUpDemo@BumpMapping@osgFX@@UAEXXZ
?effectAuthor@BumpMapping@osgFX@@UBEPBDXZ
?effectDescription@BumpMapping@osgFX@@UBEPBDXZ
?effectName@BumpMapping@osgFX@@UBEPBDXZ
?accept@BumpMapping@osgFX@@UAEXAAVNodeVisitor@osg@@@Z
?className@BumpMapping@osgFX@@UBEPBDXZ
?libraryName@BumpMapping@osgFX@@UBEPBDXZ
?isSameKindAs@BumpMapping@osgFX@@UBE_NPBVObject@osg@@@Z
?clone@BumpMapping@osgFX@@UBEPAVObject@osg@@ABVCopyOp@4@@Z
?cloneType@BumpMapping@osgFX@@UBEPAVObject@osg@@XZ
??0BumpMapping@osgFX@@QAE@XZ
?getOverrideDiffuseTexture@BumpMapping@osgFX@@QBEPBVTexture2D@osg@@XZ
?getOverrideNormalMapTexture@BumpMapping@osgFX@@QBEPBVTexture2D@osg@@XZ
?setOverrideDiffuseTexture@BumpMapping@osgFX@@QAEXPAVTexture2D@osg@@@Z
?setOverrideNormalMapTexture@BumpMapping@osgFX@@QAEXPAVTexture2D@osg@@@Z
??1AnisotropicLighting@osgFX@@MAE@XZ
?define_techniques@AnisotropicLighting@osgFX@@MAE_NXZ
?setUpDemo@Effect@osgFX@@UAEXXZ
?effectAuthor@AnisotropicLighting@osgFX@@UBEPBDXZ
?effectDescription@AnisotropicLighting@osgFX@@UBEPBDXZ
?effectName@AnisotropicLighting@osgFX@@UBEPBDXZ
?traverse@Effect@osgFX@@UAEXAAVNodeVisitor@osg@@@Z
?accept@AnisotropicLighting@osgFX@@UAEXAAVNodeVisitor@osg@@@Z
?className@AnisotropicLighting@osgFX@@UBEPBDXZ
?libraryName@AnisotropicLighting@osgFX@@UBEPBDXZ
?isSameKindAs@AnisotropicLighting@osgFX@@UBE_NPBVObject@osg@@@Z
?clone@AnisotropicLighting@osgFX@@UBEPAVObject@osg@@ABVCopyOp@4@@Z
?cloneType@AnisotropicLighting@osgFX@@UBEPAVObject@osg@@XZ
??0AnisotropicLighting@osgFX@@QAE@XZ
?getLightingMap@AnisotropicLighting@osgFX@@QBEPBVImage@osg@@XZ
?setLightingMap@AnisotropicLighting@osgFX@@QAEXPAVImage@osg@@@Z
?cloneType@MultiTextureControl@osgFX@@UBEPAVObject@osg@@XZ
??0MultiTextureControl@osgFX@@QAE@XZ
?getNumTextureWeights@MultiTextureControl@osgFX@@QBEIXZ
?getTextureWeight@MultiTextureControl@osgFX@@QBEMI@Z
?setTextureWeight@MultiTextureControl@osgFX@@QAEXIM@Z
??1Cartoon@osgFX@@MAE@XZ
?define_techniques@Cartoon@osgFX@@MAE_NXZ
?effectAuthor@Cartoon@osgFX@@UBEPBDXZ
?effectDescription@Cartoon@osgFX@@UBEPBDXZ
?effectName@Cartoon@osgFX@@UBEPBDXZ
?accept@Cartoon@osgFX@@UAEXAAVNodeVisitor@osg@@@Z
?className@Cartoon@osgFX@@UBEPBDXZ
?libraryName@Cartoon@osgFX@@UBEPBDXZ
?isSameKindAs@Cartoon@osgFX@@UBE_NPBVObject@osg@@@Z
?clone@Cartoon@osgFX@@UBEPAVObject@osg@@ABVCopyOp@4@@Z
?cloneType@Cartoon@osgFX@@UBEPAVObject@osg@@XZ
??0Cartoon@osgFX@@QAE@XZ
?className@SpecularHighlights@osgFX@@UBEPBDXZ
?getOutlineColor@Cartoon@osgFX@@QBEABVVec4f@osg@@XZ
?cloneType@Outline@osgFX@@UBEPAVObject@osg@@XZ
?libraryName@MultiTextureControl@osgFX@@UBEPBDXZ

msvcp90

??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
?_Lock@_Mutex@std@@QAEXXZ
?_Unlock@_Mutex@std@@QAEXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?uncaught_exception@std@@YA_NXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHPBDH@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
??$?6DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@M@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z

msvcr90

__CxxFrameHandler3
??3@YAXPAX@Z
??2@YAPAXI@Z
_purecall
__RTDynamicCast
_unlock
__clean_type_info_names_internal
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
_crt_debugger_hook
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_encoded_null
free
_malloc_crt
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit

kernel32

GetSystemTimeAsFileTime
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
GetCurrentProcessId

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 195KB - Virtual size: 196KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

df55d0ac3bfd22fd8cca2144bab75fe6

Headers

DLL Characteristics

File Characteristics

Imports

ot11-openthreads

osg62-osg

osg62-osgdb

osg62-osgfx

msvcp90

msvcr90

kernel32

Sections

.text Size: 11KB - Virtual size: 11KB

.rdata Size: 15KB - Virtual size: 14KB

.data Size: 1024B - Virtual size: 1KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 2KB

.text Size: 195KB - Virtual size: 196KB

.text
Size: 11KB - Virtual size: 11KB

.rdata
Size: 15KB - Virtual size: 14KB

.data
Size: 1024B - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 2KB

.text
Size: 195KB - Virtual size: 196KB