c6cbd78b5812e17e43791a766172c13496c92a414870b7a10687fb55c27fada8

Sharing

Copy URL Twitter E-mail

General

Target

c6cbd78b5812e17e43791a766172c13496c92a414870b7a10687fb55c27fada8
Size

320KB
MD5

0640dc231aa631b0ebb6b8298e2dbbc0
SHA1

4958d158752629a4bdc3f4d33c14e29af4a988c7
SHA256

c6cbd78b5812e17e43791a766172c13496c92a414870b7a10687fb55c27fada8
SHA512

ef1c08d09f25a4fd10588e2fdf38a6ab4c720196e19d1783c4e358897ce1c43e4e0aadfef4c57ca5cff518e2cf1ebda57829d08ad5dead870168493914251ad6
SSDEEP

6144:iN8SdyBh65xyRJizZ4xcn1BFDm3R+ro3yYLDyrtkWGvEJoNJM:/SdyBI5xy+b9iJGovEB

Score

N/A

Malware Config

Signatures

Files

c6cbd78b5812e17e43791a766172c13496c92a414870b7a10687fb55c27fada8
.dll windows x86

94ac4b897e3de45c758aaf8790162bf0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

d3dx9_43

D3DXMatrixScaling
D3DXCreateFontA
D3DXCreateSprite
D3DXGetImageInfoFromFileInMemory
D3DXCreateCubeTextureFromFileInMemoryEx
D3DXCreateTextureFromFileInMemoryEx
D3DXSaveTextureToFileW
D3DXCreateVolumeTextureFromFileInMemoryEx

user32

GetAsyncKeyState

kernel32

HeapDestroy
GetStringTypeW
LCMapStringW
WriteConsoleW
SetStdHandle
IsProcessorFeaturePresent
HeapReAlloc
MultiByteToWideChar
WaitForSingleObject
CreateMutexA
ReleaseMutex
CloseHandle
WriteFile
ReadFile
CreateFileW
DisconnectNamedPipe
FlushFileBuffers
GetLastError
GetModuleFileNameW
DisableThreadLibraryCalls
GetModuleHandleA
VirtualProtect
CreateThread
FreeLibrary
GetSystemDirectoryA
GetProcAddress
LoadLibraryA
DecodePointer
EncodePointer
HeapAlloc
GetCurrentThreadId
GetCommandLineA
GetStdHandle
HeapFree
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
RaiseException
GetModuleHandleW
ExitProcess
HeapCreate
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
Sleep
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LoadLibraryW
LeaveCriticalSection
EnterCriticalSection
RtlUnwind
HeapSize
SetFilePointer
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage

Exports

Exports

Nothing
uMod_Direct3DCreate9
uMod_Direct3DCreate9Ex

Sections

.text
Size: 114KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 169KB - Virtual size: 172KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

94ac4b897e3de45c758aaf8790162bf0

Headers

DLL Characteristics

File Characteristics

Imports

d3dx9_43

user32

kernel32

Exports

Exports

Sections

.text Size: 114KB - Virtual size: 114KB

.rdata Size: 21KB - Virtual size: 20KB

.data Size: 6KB - Virtual size: 14KB

.reloc Size: 8KB - Virtual size: 8KB

.rmnet Size: 169KB - Virtual size: 172KB

.text
Size: 114KB - Virtual size: 114KB

.rdata
Size: 21KB - Virtual size: 20KB

.data
Size: 6KB - Virtual size: 14KB

.reloc
Size: 8KB - Virtual size: 8KB

.rmnet
Size: 169KB - Virtual size: 172KB