7bdac7f4caefdb87f7f83f0de86fd2277b4816c2d7998ebdab0a6917a1bcbbca

Sharing

Copy URL Twitter E-mail

General

Target

7bdac7f4caefdb87f7f83f0de86fd2277b4816c2d7998ebdab0a6917a1bcbbca
Size

284KB
MD5

0519352f2adf59ddc850d6961b5e8fa0
SHA1

162db95bc8f6b1f15a5a1390aacf153e35650172
SHA256

7bdac7f4caefdb87f7f83f0de86fd2277b4816c2d7998ebdab0a6917a1bcbbca
SHA512

68b17ff18f0aad33b3a4233969c4f6a3e663b09db5517e4291edf4e0b79357fc4e81aeeb042ba8a35b2dd514683bb336ec7598f07ff210c615b438e842e9a471
SSDEEP

3072:7V9nPCPv0dwq36/jh+LAlb4aF+qgtws5hIoX345cPB1nrA14Q7gTd2X5WpqW1jl6:7VEEqqOlIMb4S5cnk6tCWh1jEb

Score

N/A

Malware Config

Signatures

Files

7bdac7f4caefdb87f7f83f0de86fd2277b4816c2d7998ebdab0a6917a1bcbbca
.dll windows x86

c9cb26c547c5d74e6cf28ec1974c217d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

WSAJoinLeaf
WSAAccept
WSARecv
WSASend
WSAGetOverlappedResult
WSARecvFrom
WSASendTo
WSASocketW
WSASocketA
inet_addr
htonl
WSAGetLastError
ioctlsocket
WSAConnect
gethostname
select
getpeername
getsockname
bind
getsockopt
setsockopt
accept
listen
closesocket
sendto
send
recvfrom
recv
connect
socket
WSAStartup
ntohl
inet_ntoa
htons
ntohs

mswsock

AcceptEx
WSARecvEx
GetAcceptExSockaddrs

kernel32

GetSystemInfo
VirtualQuery
LoadLibraryA
LoadLibraryExA
IsBadReadPtr
FreeLibrary
WriteFile
SetFilePointer
CreateEventA
SetEvent
lstrcmpiA
lstrcpynA
lstrcmpA
VirtualFree
VirtualAlloc
GetStdHandle
SetLastError
FlushInstructionCache
CreateRemoteThread
Module32First
VirtualAllocEx
SetThreadContext
GetThreadContext
TerminateThread
GetExitCodeThread
GetCurrentThreadId
GetCurrentThread
GlobalDeleteAtom
GlobalLock
InterlockedIncrement
InterlockedDecrement
LocalFree
LocalAlloc
TlsAlloc
GlobalUnlock
GlobalHandle
TlsFree
GlobalReAlloc
TlsSetValue
LocalReAlloc
TlsGetValue
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
lstrcatA
GetVersion
SetErrorMode
GlobalFlags
WritePrivateProfileStringA
GetProcessVersion
FlushFileBuffers
VirtualProtect
GetCPInfo
GetOEMCP
RtlUnwind
HeapFree
HeapAlloc
SetStdHandle
GetFileType
GetCommandLineA
ExitProcess
ExitThread
RaiseException
HeapSize
HeapReAlloc
GetACP
LCMapStringA
LCMapStringW
HeapDestroy
HeapCreate
IsBadWritePtr
SetHandleCount
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
IsBadCodePtr
Module32Next
GetCurrentProcess
CreateThread
SetThreadPriority
CreateToolhelp32Snapshot
OpenProcess
GetExitCodeProcess
TerminateProcess
GetModuleHandleA
GetProcAddress
SuspendThread
MultiByteToWideChar
ResumeThread
GetLastError
GetModuleFileNameA
GetVersionExA
OutputDebugStringA
Sleep
OpenMutexA
GetTickCount
ReleaseMutex
CloseHandle
GlobalFree
DeleteCriticalSection
CreateMutexA
InitializeCriticalSection
EnterCriticalSection
GlobalAlloc
LeaveCriticalSection
WideCharToMultiByte
WaitForSingleObject
CreateProcessW
CreateProcessA
lstrlenA
lstrcpyA
WriteProcessMemory
VirtualProtectEx

user32

ClientToScreen
GetDC
ReleaseDC
TabbedTextOutA
DrawTextA
GrayStringA
GetSystemMetrics
GetWindowRect
GetWindowPlacement
IsIconic
SystemParametersInfoA
RegisterWindowMessageA
SetWindowPos
SetWindowLongA
GetWindow
GetForegroundWindow
GetMessagePos
GetMessageTime
RemovePropA
CallWindowProcA
GetPropA
SetPropA
GetClassLongA
DestroyWindow
GetDlgCtrlID
GetWindowTextA
GetDlgItem
GetMenuItemID
GetSubMenu
GetMenuItemCount
GetMenu
RegisterClassA
WinHelpA
GetCapture
GetTopWindow
CopyRect
GetClientRect
AdjustWindowRectEx
SetFocus
GetSysColor
MapWindowPoints
LoadIconA
ShowWindow
UnregisterClassA
GetClassNameA
PtInRect
LoadCursorA
GetSysColorBrush
LoadStringA
DestroyMenu
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
SetCursor
SendMessageA
PostMessageA
EnableWindow
wsprintfA
GetClassInfoA
DefWindowProcA
PostThreadMessageA
CreateWindowExA
SetForegroundWindow
MessageBoxA
PostQuitMessage
SetTimer
SetWindowTextA
UnhookWindowsHookEx
SetWindowsHookExA
CallNextHookEx
KillTimer
WaitMessage
GetMenuCheckMarkDimensions

gdi32

DeleteDC
GetDeviceCaps
GetObjectA
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
SaveDC
RestoreDC
SelectObject
GetStockObject
SetBkColor
SetTextColor
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
DeleteObject
CreateBitmap

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey

comctl32

ord17

ole32

CoGetClassObject
CoCreateInstance

imagehlp

ImageDirectoryEntryToData

wsock32

WSAAsyncSelect
shutdown
WSACleanup
WSASetLastError
gethostbyname

winmm

timeKillEvent
timeSetEvent

Exports

Exports

FNS_AddHost
FNS_EmptyHost
FNS_GameBegin
FNS_GameEnd
FNS_GetDPlaySvrHandle
FNS_GetGamePlayState
FNS_GetLocalGamePort
FNS_GetVersion
FNS_ModifyPlayFlag
FNS_ModifyProxyIp
FNS_ModifySwitchPort
FNS_RemoveHost
FNS_SetCurrentPath
FNS_SetDPlaySvrHandle
FNS_SetData
FNS_SetDataCallbackFunc
FNS_SetGameParam
FNS_SetGamePlayState
FNS_SetGameProcessName
FNS_SetInSameWall
FNS_SetLocalHostInfo
FNS_SetNetCtrlFlag
FNS_SetProxy
FNS_SetRemovedSocket
FNS_SetRoomInfo
FNS_SetSwitchInfo

Sections

.text
Size: 140KB - Virtual size: 138KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Shared
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

c9cb26c547c5d74e6cf28ec1974c217d

Headers

File Characteristics

Imports

ws2_32

mswsock

kernel32

user32

gdi32

winspool.drv

advapi32

comctl32

ole32

imagehlp

wsock32

winmm

Exports

Exports

Sections

.text Size: 140KB - Virtual size: 138KB

.rdata Size: 28KB - Virtual size: 27KB

.data Size: 8KB - Virtual size: 34KB

Shared Size: 16KB - Virtual size: 14KB

.rsrc Size: 8KB - Virtual size: 7KB

.reloc Size: 20KB - Virtual size: 17KB

.rmnet Size: 60KB - Virtual size: 60KB

.text
Size: 140KB - Virtual size: 138KB

.rdata
Size: 28KB - Virtual size: 27KB

.data
Size: 8KB - Virtual size: 34KB

Shared
Size: 16KB - Virtual size: 14KB

.rsrc
Size: 8KB - Virtual size: 7KB

.reloc
Size: 20KB - Virtual size: 17KB

.rmnet
Size: 60KB - Virtual size: 60KB