175acccd7f0b12767f2d63cb1cb4c8f02bbacb3de0c6bd942253d91566db6a69

Sharing

Copy URL Twitter E-mail

General

Target

175acccd7f0b12767f2d63cb1cb4c8f02bbacb3de0c6bd942253d91566db6a69
Size

440KB
MD5

2fc95f74cdf7bbbf042fe581f3735400
SHA1

0f3d05a3ea3facde12d515fdbb171bb37198e25b
SHA256

175acccd7f0b12767f2d63cb1cb4c8f02bbacb3de0c6bd942253d91566db6a69
SHA512

6f3346e7b4fc40dda4722ddc7df1a562510f70d9523280803c54434d9f7e20d32e6496367e8a7176b9bf2c2ddaf80e4fa35d08d2544fdccc82e776e9b136d0b8
SSDEEP

12288:trtry6t+Mf+wmnrR1JNhlZazHbPcz9Keg0RFecMcmVlUkK+uZWLe/581BbUWkNkw:481tUWkNjM

Score

N/A

Malware Config

Signatures

Files

175acccd7f0b12767f2d63cb1cb4c8f02bbacb3de0c6bd942253d91566db6a69
.dll windows x86

ad5f90933e0c86ac983e3720df442f7c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegQueryValueExA
RegCreateKeyExA
RegOpenKeyExA
RegCloseKey

ws2_32

sendto
WSAStartup
inet_addr
recvfrom
WSAGetLastError
htonl
setsockopt
htons
recv
bind
socket
closesocket
send

user32

MessageBoxA
MessageBoxW

kernel32

GetProcessHeap
SetEndOfFile
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
InitializeCriticalSectionAndSpinCount
GetLocaleInfoA
GetCurrentThread
GetCommandLineA
InitializeCriticalSection
LeaveCriticalSection
CreateDirectoryA
GetLastError
GetProcAddress
EnterCriticalSection
GetLocalTime
GetModuleHandleA
LoadLibraryExA
DeleteCriticalSection
ExitProcess
CreateFileA
GetVolumeInformationA
GetSystemDirectoryA
LoadLibraryA
GetSystemInfo
GetModuleFileNameA
VirtualProtect
CreateThread
GetTickCount
TerminateThread
GetCurrentThreadId
GetPrivateProfileStringA
WideCharToMultiByte
MultiByteToWideChar
FreeLibrary
SetFileAttributesA
HeapFree
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapReAlloc
GetSystemTimeAsFileTime
DeleteFileA
RaiseException
RtlUnwind
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapCreate
HeapDestroy
VirtualFree
VirtualAlloc
Sleep
WriteFile
GetStdHandle
HeapSize
GetConsoleCP
GetConsoleMode
CloseHandle
SetStdHandle
GetFileType
SetFilePointer
SetHandleCount
GetStartupInfoA
ReadFile
FlushFileBuffers
LCMapStringA
LCMapStringW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetStringTypeA
GetStringTypeW

Exports

Exports

CreateInterface
GetSteamApps
GetSteamFriends
GetSteamGameServer
GetSteamMasterServerUpdater
GetSteamMatchMaking
GetSteamMatchMakingServers
GetSteamRemoteStorage
GetSteamUtils
PostCallback
Steam_BConnected
Steam_BGetCallback
Steam_BLoggedOn
Steam_BReleaseSteamPipe
Steam_ConnectToGlobalUser
Steam_CreateGlobalUser
Steam_CreateLocalUser
Steam_CreateSteamPipe
Steam_FreeLastCallback
Steam_GSBLoggedOn
Steam_GSBSecure
Steam_GSGetSteam2GetEncryptionKeyToSendToNewClient
Steam_GSGetSteamID
Steam_GSLogOff
Steam_GSLogOn
Steam_GSRemoveUserConnect
Steam_GSSendSteam2UserConnect
Steam_GSSendSteam3UserConnect
Steam_GSSendUserDisconnect
Steam_GSSendUserStatusResponse
Steam_GSSetServerType
Steam_GSSetSpawnCount
Steam_GSUpdateStatus
Steam_GetGSHandle
Steam_InitiateGameConnection
Steam_LogOff
Steam_LogOn
Steam_ReleaseUser
Steam_SetLocalIPBinding
Steam_TerminateGameConnection

Sections

.text
Size: 231KB - Virtual size: 230KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 70KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 50KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 56KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ad5f90933e0c86ac983e3720df442f7c

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

ws2_32

user32

kernel32

Exports

Exports

Sections

.text Size: 231KB - Virtual size: 230KB

.rdata Size: 70KB - Virtual size: 69KB

.data Size: 50KB - Virtual size: 62KB

.rsrc Size: 512B - Virtual size: 436B

.reloc Size: 31KB - Virtual size: 30KB

.rmnet Size: 56KB - Virtual size: 60KB

.text
Size: 231KB - Virtual size: 230KB

.rdata
Size: 70KB - Virtual size: 69KB

.data
Size: 50KB - Virtual size: 62KB

.rsrc
Size: 512B - Virtual size: 436B

.reloc
Size: 31KB - Virtual size: 30KB

.rmnet
Size: 56KB - Virtual size: 60KB