7f415d82d94f614e451fce36e0cd3a20e93e088d80c40c25bc2d9fc8061de1e6

Sharing

Copy URL Twitter E-mail

General

Target

7f415d82d94f614e451fce36e0cd3a20e93e088d80c40c25bc2d9fc8061de1e6
Size

273KB
MD5

850a6d81e85a56d7cbd4c68655b941f9
SHA1

2c2e3f4e92aa130e8ae586fae8910b0da75e9599
SHA256

7f415d82d94f614e451fce36e0cd3a20e93e088d80c40c25bc2d9fc8061de1e6
SHA512

0deb7151092e8265fa87d9fa3aa8a7f635c42244b5f449f750123708429859c62074e387d21ebda40545cfbe1559cda3858b416a4ce7c52614225bc3697f0e45
SSDEEP

6144:F0W+WHKMzIYEbsXpLFxisrzOmdxWkCTIiYi9GBuLD/omQ:F0WDqM9lZpxllnrC9YBuLx

Score

N/A

Malware Config

Signatures

Files

7f415d82d94f614e451fce36e0cd3a20e93e088d80c40c25bc2d9fc8061de1e6
.dll windows x86

667d528430531ee3eae247a6d37bd89e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ord17

advapi32

RegEnumKeyExA
RegSetValueExA
RegCloseKey
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
RegOpenKeyExA
RegQueryInfoKeyA
RegQueryValueExA

oleaut32

LoadRegTypeLi
OleCreateFontIndirect
SysAllocStringLen
SysStringByteLen
SysStringLen
VarBstrFromBool
VarCyMul
VarUI4FromStr
VariantInit
LoadTypeLi

shell32

DragAcceptFiles
SHAppBarMessage
SHBindToParent
SHExtractIconsW
SHFreeNameMappings
SHGetMalloc
SHLoadNonloadedIconOverlayIdentifiers
DragQueryFileAorW

gdi32

SelectObject
SetWindowOrgEx
SetViewportOrgEx
SetBkMode
RestoreDC
ModifyWorldTransform
GetStockObject
GetObjectA
GetFontResourceInfoW
GetDeviceCaps
DeleteObject
DeleteDC
DPtoLP
CreateSolidBrush
CreateFontIndirectA
CreateCompatibleBitmap
BitBlt

user32

LoadCursorA
KillTimer
IsChild
InvalidateRgn
InvalidateRect
GetWindowTextLengthA
GetWindowRect
GetWindowLongA
GetWindow
GetSysColorBrush
GetSysColor
GetParent
GetListBoxInfo
GetLastInputInfo
GetKBCodePage
GetFocus
GetDoubleClickTime
LoadStringA
GetCursorPos
GetClientRect
GetClassNameA
GetClassInfoExA
GetActiveWindow
FlashWindow
EnumThreadWindows
EndPaint
EndDialog
EnableWindow
DialogBoxIndirectParamA
DestroyAcceleratorTable
DefWindowProcA
CreateWindowExA
CreateAcceleratorTableA
CharNextA
CallWindowProcA
BeginPaint
MessageBeep
MessageBoxA
MoveWindow
wsprintfA
WaitForInputIdle
UnregisterHotKey
SetWindowContextHelpId
UnregisterClassA
SetRectEmpty
SetFocus
SetDoubleClickTime
SetCursor
SetCapture
ReleaseDC
ReleaseCapture
RegisterWindowMessageA
RedrawWindow
GetDlgCtrlID
PtInRect
IsWindow

ddraw

DDInternalLock
GetSurfaceFromDC
DDGetAttachedSurfaceLcl

kernel32

LoadLibraryA
LoadLibraryExA
LoadResource
LockResource
MulDiv
MultiByteToWideChar
QueryPerformanceCounter
RaiseException
SetLastError
SizeofResource
VirtualAlloc
lstrcmpiA
VirtualFree
VirtualProtect
WideCharToMultiByte
LeaveCriticalSection
IsProcessorFeaturePresent
IsDBCSLeadByte
InterlockedIncrement
InterlockedExchange
InterlockedDecrement
InterlockedCompareExchange
InitializeCriticalSection
HeapFree
HeapAlloc
GlobalUnlock
GlobalLock
GlobalHandle
GlobalFree
GlobalAlloc
GetVersionExA
GetTickCount
GetThreadLocale
GetSystemTimeAsFileTime
GetProcessPriorityBoost
GetProcessHeap
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetLocaleInfoA
GetLastError
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
GetACP
FreeLibrary
FlushInstructionCache
FindResourceA
ExitProcess
EnterCriticalSection
DisableThreadLibraryCalls
DeleteCriticalSection
lstrcpynA
lstrlenA
lstrlenW
lstrcmpA

Exports

Exports

ConvertMeshSubsetToSingleStrip
CreateEffectPool
CreateFontW
CreateVolumeTextureFromFileInMemoryEx
CreateVolumeTextureFromResourceExW
GatherFragments
GetComment
GetJ2KOptions
LoadMeshHierarchyFromXInMemory
LoadPRTBufferFromFileA
MatrixInverse
MatrixTransformation
SimplifyMesh
mpegInOpenMPEGIdxW

Sections

.text
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 120KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

667d528430531ee3eae247a6d37bd89e

Headers

File Characteristics

Imports

comctl32

advapi32

oleaut32

shell32

gdi32

user32

ddraw

kernel32

Exports

Exports

Sections

.text Size: 55KB - Virtual size: 54KB

.rdata Size: 120KB - Virtual size: 119KB

.data Size: 43KB - Virtual size: 43KB

.rsrc Size: 50KB - Virtual size: 50KB

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 55KB - Virtual size: 54KB

.rdata
Size: 120KB - Virtual size: 119KB

.data
Size: 43KB - Virtual size: 43KB

.rsrc
Size: 50KB - Virtual size: 50KB

.reloc
Size: 3KB - Virtual size: 3KB