995a908fe044ce1b8ffe5050b04b42c9d7eaed81f21f63e9d2834b56723107a4

Sharing

Copy URL Twitter E-mail

General

Target

995a908fe044ce1b8ffe5050b04b42c9d7eaed81f21f63e9d2834b56723107a4
Size

344KB
MD5

4c0106b548a03d8a89ec1ab9b0692a30
SHA1

075709ce05b03704ea314654bdd61ae6f38916bb
SHA256

995a908fe044ce1b8ffe5050b04b42c9d7eaed81f21f63e9d2834b56723107a4
SHA512

d540ac80ee9643c774dc469fdf9244fa9d62ea9ed8cbdae08c4528ab19fc563ad1855cf1a46f22c632e150851edbc33bb49be709554b111a01573e2fef0732df
SSDEEP

6144:eVZhWwT6XeauwfOrlGJQG2XyHjhU8csyjkK6FCQg7hWkAORx2up0GfI5T/NddGRf:eVKuCUf6FCQKUkhK5SR4Ax

Score

N/A

Malware Config

Signatures

Files

995a908fe044ce1b8ffe5050b04b42c9d7eaed81f21f63e9d2834b56723107a4
.dll windows x86

a5e8c70082801370422e80f4ef3bb66f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

timeGetTime

kernel32

SetHandleCount
CompareStringW
lstrlenA
OutputDebugStringA
GetTickCount
GlobalAlloc
GlobalUnlock
GlobalLock
GetSystemDefaultLangID
CompareStringA
GetLocaleInfoW
GetSystemInfo
VirtualProtect
SetEndOfFile
SetConsoleCtrlHandler
LCMapStringW
LCMapStringA
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetDateFormatA
ExitProcess
GetSystemTimeAsFileTime
RtlUnwind
RaiseException
GetCurrentThreadId
GetCommandLineA
GetVersionExA
HeapAlloc
HeapFree
GetProcAddress
GetModuleHandleA
QueryPerformanceCounter
GetCurrentProcessId
GetModuleFileNameA
GetLastError
CloseHandle
EnterCriticalSection
LeaveCriticalSection
TlsAlloc
SetLastError
GetCurrentThread
TlsFree
TlsSetValue
TlsGetValue
SetUnhandledExceptionFilter
DeleteCriticalSection
FatalAppExitA
TerminateProcess
GetCurrentProcess
SetEnvironmentVariableA
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
UnhandledExceptionFilter
WriteFile
ReadFile
VirtualAlloc
HeapReAlloc
IsBadWritePtr
HeapSize
SetFilePointer
LoadLibraryA
InterlockedExchange
VirtualQuery
SetStdHandle
FlushFileBuffers
GetTimeZoneInformation
CreateFileA
InitializeCriticalSection
GetACP
GetOEMCP
GetCPInfo
IsBadReadPtr
IsBadCodePtr
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
GetTimeFormatA

user32

GetKeyboardLayoutNameA
LoadKeyboardLayoutA
IsClipboardFormatAvailable
OpenClipboard
GetClipboardData
CloseClipboard
EmptyClipboard
SetClipboardData
MessageBoxA
GetKeyState
SetCapture
ReleaseCapture
CharNextA

Exports

Exports

LG_create_game
LG_delete_game

Sections

.text
Size: 224KB - Virtual size: 223KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a5e8c70082801370422e80f4ef3bb66f

Headers

File Characteristics

Imports

winmm

kernel32

user32

Exports

Exports

Sections

.text Size: 224KB - Virtual size: 223KB

.rdata Size: 32KB - Virtual size: 31KB

.data Size: 8KB - Virtual size: 18KB

.reloc Size: 16KB - Virtual size: 12KB

.rmnet Size: 60KB - Virtual size: 60KB

.text
Size: 224KB - Virtual size: 223KB

.rdata
Size: 32KB - Virtual size: 31KB

.data
Size: 8KB - Virtual size: 18KB

.reloc
Size: 16KB - Virtual size: 12KB

.rmnet
Size: 60KB - Virtual size: 60KB