00bc0834f4cc86ccbbc4460b03a34ff15b6b7ac27e724844da99956a2a231e30

Sharing

Copy URL

Twitter E-mail

General

Target

00bc0834f4cc86ccbbc4460b03a34ff15b6b7ac27e724844da99956a2a231e30
Size

300KB
MD5

240d057c848addefa93f263990af8050
SHA1

ea00b03f99ca4af28eba08ecc86d10ce1d1cd413
SHA256

00bc0834f4cc86ccbbc4460b03a34ff15b6b7ac27e724844da99956a2a231e30
SHA512

2fb420cef3b968c5de0b84cc7257ab00c085be5c0f874003488ab1f229960e2bbe7d4602734cc8a0fb2c143c53307c1ab32ef4eb58053cc50ba2ce05e07b398c
SSDEEP

6144:p/V1u19vHr+kRZ8xIWQXYL/VaDJ/q/ZQr6GdvMQi:RqHakRZfYuQRYF3

Score

N/A

Malware Config

Signatures

Files

00bc0834f4cc86ccbbc4460b03a34ff15b6b7ac27e724844da99956a2a231e30
.dll windows x86

68b84cb72502acb02ef7bd3679ec04d2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetLastError
GetProcAddress
FreeLibrary

user32

ReleaseDC
GetWindowLongA
GetClassLongA
ChangeDisplaySettingsA
EnumDisplaySettingsA
GetDC

gdi32

SetPixelFormat
ChoosePixelFormat
GetDeviceGammaRamp
SetDeviceGammaRamp
SwapBuffers
DescribePixelFormat

p3core

p3core_system_delete_vector
fptr_mm_memcpy
p3core_system_new_vector
?get_system@unit_system_t@prism@@SAPAV12@I@Z
?error@prism@@YAXQBDZZ
?_clone_attributes_to@unit_base_t@prism@@IBE_NABUunit_descriptor_t@2@QAV12@@Z
array_error_outside_boundaries_index
?v_abort_fail@prism@@YAXQBD0I0@Z
?_destroy_attributes@unit_base_t@prism@@IAEXABUunit_descriptor_t@2@@Z
?is_anonymous@unit_t@prism@@UBE_NXZ
?is_nameless@unit_t@prism@@UBE_NXZ
?get_unit_name@unit_t@prism@@UBE_NQAVmstring_t@2@@Z
?get_unit_name_suffix@unit_t@prism@@UBE_KXZ
?NUL_CHAR@string@prism@@2PBDB
p3core_system_delete
p3core_system_new
?copy@mstring_t@prism@@QAE_NABVstring@2@III@Z
fptr_matrix_transpose2
?EMPTY@string@prism@@2ABV12@B
??1dl_ops_t@prism@@UAE@XZ
??0dl_ops_t@prism@@QAE@XZ
?dl_unregister@dl_ops_t@prism@@UAE_NQAUHINSTANCE__@@0@Z
?dl_execute@dl_ops_t@prism@@UAE_NQAUHINSTANCE__@@0IQAX@Z
array_error_outside_boundaries_iterator
?printf@mstring_t@prism@@QAA_NPBDZZ
?v_dos2unix_path@prism@@YAXQAVmstring_t@1@@Z
?hbmp_flip@prism@@YAXW4hbmp_type_t@1@IIPAX@Z
?message@prism@@YAXQBDZZ
?hbmp_mip_count@prism@@YAIII@Z
?hbmp_pixel_count@prism@@YAIIII@Z
?hbmp_convert@prism@@YAXPAX0W4hbmp_type_t@1@1IIII@Z
?hbmp_mip_count@prism@@YAII@Z
?add_to_garbage@unit_system_t@prism@@SAXQAVunit_base_t@2@@Z
?warning@prism@@YAXQBDZZ
?compute_fingerprint@unit_system_t@prism@@SAIABVstring@2@@Z

p3shared

?unit_descriptor@resource_unit_u@prism@@2Uunit_descriptor_t@2@B
?_call_post_load@resource_unit_u@prism@@UAE_NXZ
?_call_pre_load@resource_unit_u@prism@@UAEXXZ
?_call_post_save@resource_unit_u@prism@@UAE_NXZ
?_call_pre_save@resource_unit_u@prism@@UAE_NXZ
?destroy@resource_unit_u@prism@@UAEXXZ
?unbind_item@resource_unit_u@prism@@UAEXQAVc_item_t@2@@Z
?bind_item@resource_unit_u@prism@@UAEXQAVc_item_t@2@@Z
??0resource_unit_u@prism@@QAE@QAVunit_system_t@1@@Z
??1resource_unit_u@prism@@MAE@XZ
?load_memory@resource_unit_u@prism@@UAE_NXZ
??1dlguard_proc_t@prism@@UAE@XZ
??0dlguard_proc_t@prism@@QAE@QAUHINSTANCE__@@@Z
?handler@vprocess_t@prism@@UAEXXZ
?shutdown@vprocess_t@prism@@UAEX_N@Z
?system@dlguard_proc_t@prism@@UAEXXZ
?get_sample_count@prism@@YAI_K@Z
?do_separate@arg_t@prism@@AAE_NQBDDH_N@Z
?lock@vprocess_t@prism@@QAEXXZ
?unlock@vprocess_t@prism@@QAEXXZ
?get_array@r_queue_t@prism@@QAEPAV?$array_dyn_t@PAVr_proto_t@prism@@@2@XZ
?vertex_state_set@effect_pass_u@prism@@QBEXQAVr_proto_t@2@@Z
?fragment_state_set@effect_pass_u@prism@@QBEXQAVr_proto_t@2@@Z
?render_state_set@effect_pass_u@prism@@QBEXQAVr_proto_t@2@@Z
?texture_state_set@effect_pass_u@prism@@QBEXQAVr_proto_t@2@@Z
?get_base@r_buffer_sysmem_t@prism@@QAEPAXXZ
??0viewport_t@prism@@QAE@XZ
?get_size@texobj_t@prism@@QAEXQAI00@Z
?shd_uses_fixed_path_texture_enables@prism@@YA_NW4gfx_path_t@1@@Z
??1viewport_t@prism@@QAE@XZ
??0r_buffer_base_t@prism@@QAE@QAVr_buffer_t@1@@Z
??1r_buffer_base_t@prism@@UAE@XZ
?standard_refill@r_buffer_base_t@prism@@IAEXXZ
??1resource_loader_t@prism@@UAE@XZ
??0resource_loader_t@prism@@QAE@ABVstring_alias_t@1@QBUunit_descriptor_t@1@@Z
?ufs_plain_load@prism@@YAPAXQAVc_item_t@1@@Z
?unload_memory@resource_unit_u@prism@@UAEXXZ
?pre_move@resource_unit_u@prism@@UAEXQAX0@Z
?post_move@resource_unit_u@prism@@UAEXQAX0@Z
?refresh_item@resource_unit_u@prism@@UAE?AW4refresh_result_t@2@XZ
?handler@hw_device_t@prism@@UAEXXZ
?_clone_to@resource_unit_u@prism@@IBE_NQAV12@@Z
?detect@hw_device_t@prism@@UAE_NXZ

gfxshared

?gfx_create_render_items@r_context_base_t@prism@@UAEXQAVr_proto_t@2@@Z
?gfx_destroy_render_items@r_context_base_t@prism@@UAEXQAVr_proto_t@2@@Z
?gfx_destroy_all_render_items@r_context_base_t@prism@@UAEXXZ
?make_current@r_context_base_t@prism@@UAE_NXZ
?get_address@r_param_info_t@prism@@QAEIABVstring@2@@Z
?gfx_surface_copy_stretch@r_context_base_t@prism@@UAEXQAVc_item_t@2@W4r_surface_type_t@2@ABV?$rectangle_t@H@2@2@Z
?mode_suspend@r_device_t@prism@@UAEXXZ
?mode_revive@r_device_t@prism@@UAEXXZ
?generate_next@r_mipmap_generator_t@prism@@QAEXXZ
??0r_mipmap_generator_t@prism@@QAE@ABVhbmp_t@1@QAX@Z
?init@r_device_t@prism@@UAE_NXZ
?shutdown@r_device_t@prism@@UAEXXZ
?gfx_surface_copy_simple@r_context_base_t@prism@@UAEXQAVc_item_t@2@W4r_surface_type_t@2@ABV?$vec_t@H$01@2@@Z
?gfx_render_state@r_context_base_t@prism@@UAEXQAVc_item_t@2@@Z
??1r_context_base_t@prism@@UAE@XZ
??0r_context_base_t@prism@@QAE@QAVr_device_t@1@@Z
??1r_mipmap_generator_t@prism@@QAE@XZ
?driver_name@r_device_t@prism@@UAEPBDXZ
?suspend@r_device_t@prism@@UAEXXZ
?revive@r_device_t@prism@@UAEXXZ
??1r_device_t@prism@@UAE@XZ
??0r_device_t@prism@@QAE@XZ
?set_path_available@r_device_t@prism@@QAEXW4gfx_path_t@2@@Z
?get_size@r_drawable_t@prism@@UAEXQAH0@Z
??1r_drawable_t@prism@@UAE@XZ
??0r_drawable_t@prism@@QAE@QAVr_context_base_t@1@QAVc_item_t@1@@Z
??1r_driver_t@prism@@UAE@XZ
??0r_driver_t@prism@@QAE@XZ
?device_register@r_driver_t@prism@@IAEXAAVr_device_t@2@@Z
?is_current@r_context_base_t@prism@@QAE_NXZ
?set_framebuffer_extents@r_context_base_t@prism@@QAEXII@Z
?r_param_parse_data@prism@@YA_NQAVc_item_t@1@QAVr_param_info_t@1@@Z
?skip_next@r_mipmap_generator_t@prism@@QAEXXZ

msvcr71

__dllonexit
_initterm
_adjust_fdiv
__CppXcptFilter
_except_handler3
_onexit
_strnicmp
strncmp
strtoul
_CIpow
_purecall
floor
ceil
fwrite
getc
fread
free
realloc
malloc
exit
strtod
strtol
_iob
fprintf

Exports

Exports

gl_get_dl_ops
gl_read

Sections

.text
Size: 136KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 80KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

68b84cb72502acb02ef7bd3679ec04d2

Headers

File Characteristics

Imports

kernel32

user32

gdi32

p3core

p3shared

gfxshared

msvcr71

Exports

Exports

Sections

.text Size: 136KB - Virtual size: 132KB

.rdata Size: 80KB - Virtual size: 76KB

.data Size: 4KB - Virtual size: 5KB

.reloc Size: 16KB - Virtual size: 14KB

.rmnet Size: 60KB - Virtual size: 60KB

.text
Size: 136KB - Virtual size: 132KB

.rdata
Size: 80KB - Virtual size: 76KB

.data
Size: 4KB - Virtual size: 5KB

.reloc
Size: 16KB - Virtual size: 14KB

.rmnet
Size: 60KB - Virtual size: 60KB