cfa1340014d7d5da2fdfa8cf38afc385aa6f31aa2394bde677a44e3ca32faf7c

Sharing

Copy URL Twitter E-mail

General

Target

cfa1340014d7d5da2fdfa8cf38afc385aa6f31aa2394bde677a44e3ca32faf7c
Size

188KB
MD5

07485eada06e1f57885679a2f3c43500
SHA1

81e9270eca094ae9302bc53cc5c263482a33e880
SHA256

cfa1340014d7d5da2fdfa8cf38afc385aa6f31aa2394bde677a44e3ca32faf7c
SHA512

d9393f211858cc2dcf951c21b5c9b3e58fd42fb0b6ff3fdfbf5166ed422132c457b825d879f09cbdba938be50cd918e6124cc68728e80a9f019efe7dc1c40862
SSDEEP

3072:1MhJHQmPt4EdP2WDAtQ5GTOnJZ37jQWiDr5/sWmxDV0vCNwiy9RIeVeme5lXu7gR:xC4Et2VtLOnDj7erhw51wiyIYemmXuOb

Score

N/A

Malware Config

Signatures

Files

cfa1340014d7d5da2fdfa8cf38afc385aa6f31aa2394bde677a44e3ca32faf7c
.dll windows x86

560bbab3c434409ad0220f48db8a94db

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

base

?Now@Time@base@@SA?AV12@XZ
?current@MessageLoopProxy@base@@SA?AV?$scoped_refptr@VMessageLoopProxy@base@@@@XZ
?ForCurrentProcess@CommandLine@@SAPAV1@XZ
?HasSwitch@CommandLine@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?PostTask@MessageLoop@base@@QAEXABVLocation@tracked_objects@@ABV?$Callback@$$A6AXXZ@2@@Z
?AddTraceEventWithThreadIdAndTimestamp@TraceLog@debug@base@@QAE?AUTraceEventHandle@23@DPBEPBD_KHABVTimeTicks@3@HPAPBD0PB_KPBV?$scoped_refptr@VConvertableToTraceFormat@debug@base@@@@E@Z
?GetProgramCounter@tracked_objects@@YAPBXXZ
?FactoryGet@Histogram@base@@SAPAVHistogramBase@2@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@HHIH@Z
?CompleteLazyInstance@internal@base@@YAXPAHHPAXP6AX1@Z@Z
?StringPrintf@base@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PBDZZ
?Start@Thread@base@@QAE_NXZ
?GetCategoryGroupEnabled@TraceLog@debug@base@@SAPBEPBD@Z
??1ScopedTracer@trace_event_internal@@QAE@XZ
?CurrentId@PlatformThread@base@@SAKXZ
?NowFromSystemTraceTime@TimeTicks@base@@SA?AV12@XZ
?GetInstance@TraceLog@debug@base@@SAPAV123@XZ
?NeedsLazyInstance@internal@base@@YA_NPAH@Z
??0WaitableEvent@base@@QAE@_N0@Z
?BreakDebugger@debug@base@@YAXXZ
?current@MessageLoop@base@@SAPAV12@XZ
??1ScopedClosureRunner@base@@QAE@XZ
?Release@ScopedClosureRunner@base@@QAE?AV?$Callback@$$A6AXXZ@2@XZ
?PostTask@TaskRunner@base@@QAE_NABVLocation@tracked_objects@@ABV?$Callback@$$A6AXXZ@2@@Z
??0ScopedClosureRunner@base@@QAE@ABV?$Callback@$$A6AXXZ@1@@Z
?GetFunctionPointer@ScopedNativeLibrary@base@@QBEPAXPBD@Z
??1LogMessage@logging@@QAE@XZ
??0LogMessage@logging@@QAE@PBDHH@Z
?GetMinLogLevel@logging@@YAHXZ
?AddBoolean@HistogramBase@base@@QAEX_N@Z
?FactoryGet@BooleanHistogram@base@@SAPAVHistogramBase@2@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@H@Z
?Lock@LockImpl@internal@base@@QAEXXZ
?Unlock@LockImpl@internal@base@@QAEXXZ
??1CallbackBase@internal@base@@IAE@XZ
??0CallbackBase@internal@base@@QAE@ABV012@@Z
??0RefCountedThreadSafeBase@subtle@base@@IAE@XZ
?AddRef@RefCountedThreadSafeBase@subtle@base@@IBEXXZ
??1RefCountedThreadSafeBase@subtle@base@@IAE@XZ
?Release@?$RefCountedThreadSafe@VTaskRunner@base@@UTaskRunnerTraits@2@@base@@QBEXXZ
?MapAt@SharedMemory@base@@QAE_NJI@Z
?CreateAnonymous@SharedMemory@base@@QAE_NI@Z
?handle@SharedMemory@base@@QBEPAXXZ
??0SharedMemory@base@@QAE@PAX_N@Z
??1SharedMemory@base@@QAE@XZ
??0SharedMemory@base@@QAE@XZ
??0FilePath@base@@QAE@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?LoadNativeLibrary@base@@YAPAUHINSTANCE__@@ABVFilePath@1@PAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?Reset@ScopedNativeLibrary@base@@QAEXPAUHINSTANCE__@@@Z
??0Location@tracked_objects@@QAE@PBD0HPBX@Z
??1FilePath@base@@QAE@XZ
??0CallbackBase@internal@base@@IAE@PAVBindStateBase@12@@Z
?Release@RefCountedThreadSafeBase@subtle@base@@IBE_NXZ
??1WaitableEvent@base@@QAE@XZ
?Stop@Thread@base@@QAEXXZ
??1LockImpl@internal@base@@QAE@XZ
?Run@Thread@base@@MAEXPAVMessageLoop@2@@Z
?ThreadMain@Thread@base@@EAEXXZ
??0Thread@base@@QAE@PBD@Z
??0LockImpl@internal@base@@QAE@XZ
??0ScopedNativeLibrary@base@@QAE@XZ
??1Thread@base@@UAE@XZ
??1Lock@base@@QAE@XZ
??1ScopedNativeLibrary@base@@QAE@XZ

media

?data@VideoFrame@media@@QBEPAEI@Z
?row_bytes@VideoFrame@media@@QBEHI@Z
?Release@?$RefCountedThreadSafe@VVideoFrame@media@@U?$DefaultRefCountedThreadSafeTraits@VVideoFrame@media@@@base@@@base@@QBEXXZ
?ComputeLetterboxRegion@media@@YA?AVRect@gfx@@ABV23@ABVSize@3@@Z
?rows@VideoFrame@media@@QBEHI@Z

skia

?reset@SkBitmap@@QAEXXZ
?allocPixels@SkBitmap@@QAE_NPAVAllocator@1@PAVSkColorTable@@@Z
??1SkBitmap@@QAE@XZ
??0SkBitmap@@QAE@ABV0@@Z
??0SkBitmap@@QAE@XZ
?PlatformCanvasStrideForWidth@skia@@YAII@Z
?CreatePlatformCanvas@skia@@YAPAVSkCanvas@@HH_NPAXW4OnFailureType@1@@Z
?setConfig@SkBitmap@@QAE_NW4Config@1@HHIW4SkAlphaType@@@Z

events_base

??0LatencyInfo@ui@@QAE@ABU01@@Z
??1LatencyInfo@ui@@QAE@XZ
?AddLatencyNumber@LatencyInfo@ui@@QAEXW4LatencyComponentType@2@_J1@Z
??0LatencyInfo@ui@@QAE@XZ
?MergeWith@LatencyInfo@ui@@QAEXABU12@@Z
?Clear@LatencyInfo@ui@@QAEXXZ

gfx

??0Rect@gfx@@QAE@ABUtagRECT@@@Z
?Intersect@?$RectBase@VRect@gfx@@VPoint@2@VSize@2@VInsets@2@VVector2d@2@H@gfx@@QAEXABVRect@2@@Z
??0Point@gfx@@QAE@XZ
??1Size@gfx@@QAE@XZ
??1Rect@gfx@@QAE@XZ
??0?$RectBase@VRect@gfx@@VPoint@2@VSize@2@VInsets@2@VVector2d@2@H@gfx@@IAE@ABVSize@1@@Z
??0?$SizeBase@VSize@gfx@@H@gfx@@IAE@HH@Z
?ToRECT@Rect@gfx@@QBE?AUtagRECT@@XZ

gl_wrapper

?kDisableGpuVsync@switches@@3QBDB

ui

?IsAeroGlassEnabled@win@ui@@YA_NXZ

kernel32

GetSystemTimeAsFileTime
GetLastError
Sleep
EncodePointer
DecodePointer
InterlockedExchange
InterlockedCompareExchange
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DisableThreadLibraryCalls
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId

gdi32

StretchDIBits

user32

GetDesktopWindow
GetDC
ReleaseDC
OpenInputDesktop
CloseDesktop
GetClientRect

msvcr100

_onexit
__dllonexit
_unlock
__clean_type_info_names_internal
_except_handler4_common
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__CppXcptFilter
_amsg_exit
_initterm_e
_initterm
_encoded_null
free
_malloc_crt
?terminate@@YAXXZ
memset
__CxxFrameHandler3
??0exception@std@@QAE@ABV01@@Z
_CxxThrowException
??2@YAPAXI@Z
memmove
memcpy
??3@YAXPAX@Z
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABQBD@Z
_lock

msvcp100

?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?uncaught_exception@std@@YA_NXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PBX@Z

Exports

Exports

??0?$RefCountedThreadSafe@VAcceleratedPresenter@@U?$DefaultRefCountedThreadSafeTraits@VAcceleratedPresenter@@@base@@@base@@QAE@XZ
??0AcceleratedPresenter@@QAE@PAUHWND__@@@Z
??0AcceleratedSurface@@QAE@PAUHWND__@@@Z
??0AcceleratedSurfaceTransformer@@QAE@XZ
??0TransportDIB@@AAE@PAX@Z
??0TransportDIB@@AAE@XZ
??1?$RefCountedThreadSafe@VAcceleratedPresenter@@U?$DefaultRefCountedThreadSafeTraits@VAcceleratedPresenter@@@base@@@base@@IAE@XZ
??1AcceleratedPresenter@@AAE@XZ
??1AcceleratedSurface@@QAE@XZ
??1AcceleratedSurfaceTransformer@@QAE@XZ
??1TransportDIB@@QAE@XZ
?AddRef@?$RefCountedThreadSafe@VAcceleratedPresenter@@U?$DefaultRefCountedThreadSafeTraits@VAcceleratedPresenter@@@base@@@base@@QBEXXZ
?AllocYUVBuffers@AcceleratedSurfaceTransformer@@AAE_NABVSize@gfx@@PAV23@1PAPAUIDirect3DSurface9@@22@Z
?AsyncCopyTo@AcceleratedPresenter@@QAEXABVRect@gfx@@ABVSize@3@ABV?$Callback@$$A6AX_NABVSkBitmap@@@Z@base@@@Z
?AsyncCopyTo@AcceleratedSurface@@QAEXABVRect@gfx@@ABVSize@3@ABV?$Callback@$$A6AX_NABVSkBitmap@@@Z@base@@@Z
?AsyncCopyToVideoFrame@AcceleratedPresenter@@QAEXABVRect@gfx@@ABV?$scoped_refptr@VVideoFrame@media@@@@ABV?$Callback@$$A6AX_N@Z@base@@@Z
?AsyncCopyToVideoFrame@AcceleratedSurface@@QAEXABVRect@gfx@@ABV?$scoped_refptr@VVideoFrame@media@@@@ABV?$Callback@$$A6AX_N@Z@base@@@Z
?AsyncPresentAndAcknowledge@AcceleratedPresenter@@QAEXABVSize@gfx@@_JABULatencyInfo@ui@@ABV?$Callback@$$A6AX_NVTimeTicks@base@@VTimeDelta@2@ABULatencyInfo@ui@@@Z@base@@@Z
?CheckDirect3DWillWork@AcceleratedPresenter@@AAE_NXZ
?CompileShaderCombo@AcceleratedSurfaceTransformer@@AAE_NW4ShaderCombo@1@@Z
?Copy@AcceleratedSurfaceTransformer@@QAE_NPAUIDirect3DTexture9@@PAUIDirect3DSurface9@@ABVSize@gfx@@@Z
?CopyInverted@AcceleratedSurfaceTransformer@@QAE_NPAUIDirect3DTexture9@@PAUIDirect3DSurface9@@ABVSize@gfx@@@Z
?CopyWithTextureScale@AcceleratedSurfaceTransformer@@AAE_NPAUIDirect3DTexture9@@PAUIDirect3DSurface9@@ABVSize@gfx@@MM@Z
?Create@TransportDIB@@SAPAV1@II@Z
?CreateDevice@ui_surface_d3d9_utils@@YA_NABVScopedNativeLibrary@base@@_KW4_D3DDEVTYPE@@IPAPAUIDirect3DDevice9Ex@@@Z
?CreateOrReuseLockableSurface@ui_surface_d3d9_utils@@YA_NPAUIDirect3DDevice9@@ABVSize@gfx@@PAV?$ScopedComPtr@UIDirect3DSurface9@@$1?_GUID_0cfbaf3a_9ff6_429a_99b3_a2796af8b89b@@3U__s_GUID@@B@win@base@@@Z
?CreateOrReuseRenderTargetTexture@ui_surface_d3d9_utils@@YA_NPAUIDirect3DDevice9@@ABVSize@gfx@@PAV?$ScopedComPtr@UIDirect3DTexture9@@$1?_GUID_85c31227_3de5_4f00_9b3a_f11ac38c18b5@@3U__s_GUID@@B@win@base@@PAPAUIDirect3DSurface9@@@Z
?CreateWithHandle@TransportDIB@@SAPAV1@PAX@Z
?DefaultHandleValue@TransportDIB@@SAPAXXZ
?DeleteInternal@?$RefCountedThreadSafe@VAcceleratedPresenter@@U?$DefaultRefCountedThreadSafeTraits@VAcceleratedPresenter@@@base@@@base@@CAXPBVAcceleratedPresenter@@@Z
?DetachAll@AcceleratedSurfaceTransformer@@QAEXXZ
?DoCopyToARGB@AcceleratedPresenter@@AAE_NABVRect@gfx@@ABVSize@3@PAVSkBitmap@@@Z
?DoCopyToAndAcknowledge@AcceleratedPresenter@@AAEXABVRect@gfx@@ABVSize@3@V?$scoped_refptr@VSingleThreadTaskRunner@base@@@@ABV?$Callback@$$A6AX_NABVSkBitmap@@@Z@base@@@Z
?DoCopyToVideoFrameAndAcknowledge@AcceleratedPresenter@@AAEXABVRect@gfx@@ABV?$scoped_refptr@VVideoFrame@media@@@@ABV?$scoped_refptr@VSingleThreadTaskRunner@base@@@@ABV?$Callback@$$A6AX_N@Z@base@@@Z
?DoCopyToYUV@AcceleratedPresenter@@AAE_NABVRect@gfx@@ABV?$scoped_refptr@VVideoFrame@media@@@@@Z
?DoInit@AcceleratedSurfaceTransformer@@AAE_NPAUIDirect3DDevice9@@@Z
?DoPresentAndAcknowledge@AcceleratedPresenter@@AAEXABVSize@gfx@@_JABULatencyInfo@ui@@ABV?$Callback@$$A6AX_NVTimeTicks@base@@VTimeDelta@2@ABULatencyInfo@ui@@@Z@base@@@Z
?DoReleaseSurface@AcceleratedPresenter@@AAEXXZ
?DoSuspend@AcceleratedPresenter@@AAEXXZ
?DrawScreenAlignedQuad@AcceleratedSurfaceTransformer@@AAEXABVSize@gfx@@@Z
?GetFakeHandleForTest@TransportDIB@@SAPAXXZ
?GetForWindow@AcceleratedPresenter@@SA?AV?$scoped_refptr@VAcceleratedPresenter@@@@PAUHWND__@@@Z
?GetIntermediateTexture@AcceleratedSurfaceTransformer@@QAE_NABVSize@gfx@@PAPAUIDirect3DTexture9@@PAPAUIDirect3DSurface9@@@Z
?GetPlatformCanvas@TransportDIB@@QAEPAVSkCanvas@@HH@Z
?GetSize@ui_surface_d3d9_utils@@YA?AVSize@gfx@@PAUIDirect3DSurface9@@@Z
?GetSize@ui_surface_d3d9_utils@@YA?AVSize@gfx@@PAUIDirect3DTexture9@@@Z
?GetWindowSize@AcceleratedPresenter@@AAE?AVSize@gfx@@XZ
?Init@AcceleratedSurfaceTransformer@@QAE_NPAUIDirect3DDevice9@@@Z
?Invalidate@AcceleratedPresenter@@QAEXXZ
?IsReadyForCopy@AcceleratedSurface@@QBE_NXZ
?IsSwapChainInitialized@AcceleratedPresenter@@QBE_NXZ
?LoadD3D9@ui_surface_d3d9_utils@@YA_NPAVScopedNativeLibrary@base@@@Z
?Map@TransportDIB@@QAE_NXZ
?Map@TransportDIB@@SAPAV1@PAX@Z
?OpenSharedTexture@ui_surface_d3d9_utils@@YA_NPAUIDirect3DDevice9@@_JABVSize@gfx@@PAPAUIDirect3DTexture9@@@Z
?Present@AcceleratedPresenter@@QAEXPAUHDC__@@@Z
?Present@AcceleratedSurface@@QAEXPAUHDC__@@@Z
?PresentWithGDI@AcceleratedPresenter@@AAEXPAUHDC__@@@Z
?ReadByGetRenderTargetData@AcceleratedSurfaceTransformer@@QAE_NPAUIDirect3DSurface9@@PAEHHH@Z
?ReadByLockAndCopy@AcceleratedSurfaceTransformer@@QAE_NPAUIDirect3DSurface9@@PAEHHH@Z
?ReadFast@AcceleratedSurfaceTransformer@@QAE_NPAUIDirect3DSurface9@@PAEHHH@Z
?Release@?$RefCountedThreadSafe@VAcceleratedPresenter@@U?$DefaultRefCountedThreadSafeTraits@VAcceleratedPresenter@@@base@@@base@@QBEXXZ
?ReleaseAll@AcceleratedSurfaceTransformer@@QAEXXZ
?ReleaseSurface@AcceleratedPresenter@@QAEXXZ
?ResetPresentThread@AcceleratedPresenter@@QAEXPAVPresentThread@@@Z
?ResizeBilinear@AcceleratedSurfaceTransformer@@QAE_NPAUIDirect3DSurface9@@ABVRect@gfx@@01@Z
?SetAdapterLUID@AcceleratedPresenter@@SAX_K@Z
?SetIsSessionLocked@AcceleratedPresenter@@QAEX_N@Z
?SetIsSessionLocked@AcceleratedSurface@@QAEX_N@Z
?SetShaderCombo@AcceleratedSurfaceTransformer@@AAE_NW4ShaderCombo@1@@Z
?Suspend@AcceleratedPresenter@@QAEXXZ
?Suspend@AcceleratedSurface@@QAEXXZ
?TransformRGBToYV12@AcceleratedSurfaceTransformer@@QAE_NPAUIDirect3DTexture9@@ABVSize@gfx@@PAPAUIDirect3DSurface9@@22@Z
?TransformRGBToYV12_MRT@AcceleratedSurfaceTransformer@@AAE_NPAUIDirect3DTexture9@@ABVSize@gfx@@11PAUIDirect3DSurface9@@22@Z
?TransformRGBToYV12_WithoutMRT@AcceleratedSurfaceTransformer@@AAE_NPAUIDirect3DTexture9@@ABVSize@gfx@@11PAUIDirect3DSurface9@@22@Z
?VerifyCanvasSize@TransportDIB@@AAE_NHH@Z
?WasHidden@AcceleratedPresenter@@QAEXXZ
?WasHidden@AcceleratedSurface@@QAEXXZ
?device@AcceleratedSurfaceTransformer@@AAEPAUIDirect3DDevice9@@XZ
?device_supports_multiple_render_targets@AcceleratedSurfaceTransformer@@ABE_NXZ
?fake_handle@?1??GetFakeHandleForTest@TransportDIB@@SAPAXXZ@4HA
?handle@TransportDIB@@QBEPAXXZ
?id@TransportDIB@@QBE?AUHandleAndSequenceNum@1@XZ
?is_valid_handle@TransportDIB@@SA_NPAX@Z
?is_valid_id@TransportDIB@@SA_NUHandleAndSequenceNum@1@@Z
?kDoAllShowPresentWithGDI@switches@@3QBDB
?kDoFirstShowPresentWithGDI@switches@@3QBDB
?memory@TransportDIB@@QBEPAXXZ
?size@TransportDIB@@QBEIXZ

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 118KB - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

560bbab3c434409ad0220f48db8a94db

Headers

DLL Characteristics

File Characteristics

Imports

base

media

skia

events_base

gfx

gl_wrapper

ui

kernel32

gdi32

user32

msvcr100

msvcp100

Exports

Exports

Sections

.text Size: 36KB - Virtual size: 35KB

.rdata Size: 27KB - Virtual size: 27KB

.data Size: 512B - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 4KB

.text Size: 118KB - Virtual size: 120KB

.text
Size: 36KB - Virtual size: 35KB

.rdata
Size: 27KB - Virtual size: 27KB

.data
Size: 512B - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 4KB

.text
Size: 118KB - Virtual size: 120KB