b9729c74f2d6b83b44fbed937426e0fe439fee23615288c249d8d16b561d1e87

Sharing

Copy URL Twitter E-mail

General

Target

b9729c74f2d6b83b44fbed937426e0fe439fee23615288c249d8d16b561d1e87
Size

176KB
MD5

0c997584de8b54369e5bf01e0ba06af0
SHA1

56efd7416d1003da581949012580ae594bbdce26
SHA256

b9729c74f2d6b83b44fbed937426e0fe439fee23615288c249d8d16b561d1e87
SHA512

9978bfcd75c71bb7d66dabd21e644a3284e50b6788504af355b0b891bcf35adfdb03989e245fbf151851fdde3bd9a287197f427192eba79057c3ffd9ecfefb15
SSDEEP

3072:OdV9EyBj+ShNDrOqZIKt12qkDfSE4nSP+BuSJjjnw:qzXBj+ShNDoUkDfBQ0+Dfw

Score

N/A

Malware Config

Signatures

Files

b9729c74f2d6b83b44fbed937426e0fe439fee23615288c249d8d16b561d1e87
.dll windows x86

137e14afd40e1024b40f190021d3fff0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

setsockopt
bind
__WSAFDIsSet
listen
accept
select
recv
send
connect
htonl
htons
socket
closesocket

winmm

timeGetTime

psapi

EnumProcesses
EnumProcessModules
GetModuleBaseNameA

kernel32

CompareStringW
CompareStringA
ReadFile
SetEndOfFile
HeapSize
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetTimeZoneInformation
FlushFileBuffers
SetStdHandle
OutputDebugStringA
LocalFree
GetLastError
FormatMessageA
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetCurrentDirectoryA
DeleteCriticalSection
DeleteFileA
WaitForSingleObject
Sleep
ExitThread
CloseHandle
CreateThread
TerminateProcess
GetProcessId
GetModuleFileNameA
GetModuleHandleA
GetCurrentProcessId
OpenProcess
GetExitCodeProcess
CreateProcessA
HeapFree
HeapAlloc
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileA
GetCurrentThreadId
GetCommandLineA
GetVersionExA
GetProcessHeap
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapDestroy
HeapCreate
VirtualFree
SetEnvironmentVariableA
VirtualAlloc
HeapReAlloc
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
RtlUnwind
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
GetFullPathNameA
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
SetFilePointer
LoadLibraryA
CreateFileA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
MultiByteToWideChar

Exports

Exports

MaestroClient_Create
MaestroClient_Delete
MaestroClient_GetHeartbeatActive
MaestroClient_SendMessage
MaestroClient_SetHeartbeatActive
MaestroClient_SetMessageArrivedCallback
MaestroClient_Start
MaestroGameController_AreProcessesHung
MaestroGameController_GetHeartbeatActive
MaestroGameController_Init
MaestroGameController_KillProcesses
MaestroGameController_Remove
MaestroGameController_SendChatMessage
MaestroGameController_SendGameAbandonedMessage
MaestroGameController_SendGameConnectedToServerMessage
MaestroGameController_SendGameLaunchedMessage
MaestroGameController_SendGameVersionMismatchMessage
MaestroGameController_SendShutdownMessage
MaestroGameController_SetExitCallback
MaestroGameController_SetHeartbeatActive
MaestroGameController_SetReceiveChatMessageCallback
MaestroGameController_Start
MaestroMessageAgent_Create
MaestroMessageAgent_Delete
MaestroMessageAgent_GetHeartbeatActive
MaestroMessageAgent_GetIsRunning
MaestroMessageAgent_SendMessage
MaestroMessageAgent_SetHeartbeatActive
MaestroMessageAgent_SetMessageArrivedCallback
MaestroMessageAgent_Start
MaestroProcessHelper_AllFilesExist
MaestroProcessHelper_GetProcessPathForProcessType
MaestroProcessHelper_Init
MaestroProcessHelper_IsProcessRunning
MaestroProcessHelper_KillProcess
MaestroProcessHelper_KillProcessByName
MaestroProcessHelper_Remove
MaestroProcessHelper_StartProcess
MaestroProcessHelper_StopProcess
MaestroServerController_Init
MaestroServerController_ProcessEvents
MaestroServerController_RegisterHwnd
MaestroServerController_Remove
MaestroServerController_SetErrorMessageCallback
MaestroServerController_SetExitCallback
MaestroServerController_Start
MaestroServerController_StartArgs
MaestroServerController_StartArgsExplicit
MaestroServerController_Stop
MaestroServerController_VerifyAllNeededFilesExist
MaestroServer_Create
MaestroServer_Delete
MaestroServer_SendMessageToAllClients
MaestroServer_SetMessageArrivedCallback
MaestroServer_Start
Maestro_ErrorToString
Maestro_GetElapsedSeconds
Maestro_Init
Maestro_MessageTypeToString
Maestro_ProcessTypeToString
Maestro_Remove

Sections

.text
Size: 76KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

137e14afd40e1024b40f190021d3fff0

Headers

File Characteristics

Imports

ws2_32

winmm

psapi

kernel32

Exports

Exports

Sections

.text Size: 76KB - Virtual size: 73KB

.rdata Size: 16KB - Virtual size: 15KB

.data Size: 8KB - Virtual size: 11KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 8KB - Virtual size: 5KB

.rmnet Size: 60KB - Virtual size: 60KB

.text
Size: 76KB - Virtual size: 73KB

.rdata
Size: 16KB - Virtual size: 15KB

.data
Size: 8KB - Virtual size: 11KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 8KB - Virtual size: 5KB

.rmnet
Size: 60KB - Virtual size: 60KB