818b7e1304fa2563b97da1b4d1542cb3f2d7af1aa6426365b77eeb186c6b6884

Sharing

Copy URL Twitter E-mail

General

Target

818b7e1304fa2563b97da1b4d1542cb3f2d7af1aa6426365b77eeb186c6b6884
Size

256KB
MD5

47f0fdea84efa905abab18e143bc0479
SHA1

5328bd079b08c1084b0a18b0b3865ce778bdab52
SHA256

818b7e1304fa2563b97da1b4d1542cb3f2d7af1aa6426365b77eeb186c6b6884
SHA512

8546d8924a362e0da6024a189d89f9c3b928c2b4f0b522023e6fe286afd9c0acac695501385a30a052d9d51530bf8baf6e7e9f552ca539dcd1dc62711e442acf
SSDEEP

3072:B6s5ac6ZnMsT6mhJgGg2XwrGDm73RRDEmJNN95g/iVZ:B6Gatn/2mhBwqD4zN95wi

Score

N/A

Malware Config

Signatures

Files

818b7e1304fa2563b97da1b4d1542cb3f2d7af1aa6426365b77eeb186c6b6884
.dll windows x86

8c667facc3f511c9e167513ce2dd43b4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadProcessMemory
WriteProcessMemory
OpenProcess
VirtualProtect
Sleep
ExitProcess
GetModuleHandleA
Module32Next
CloseHandle
Module32First
CreateToolhelp32Snapshot
Process32Next
Process32First
GetProcAddress
LoadLibraryA
lstrcatA
GetSystemDirectoryA
GetModuleFileNameA
DisableThreadLibraryCalls
GetDiskFreeSpaceA
CreateFileW
SetStdHandle
WriteConsoleW
HeapReAlloc
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetStringTypeW
MultiByteToWideChar
LCMapStringW
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
RtlUnwind
GetModuleHandleW
DecodePointer
HeapAlloc
GetLastError
HeapFree
RaiseException
EnterCriticalSection
LeaveCriticalSection
EncodePointer
GetCurrentThreadId
GetCommandLineA
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
IsProcessorFeaturePresent
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LoadLibraryW
GetLocaleInfoW
WriteFile
GetStdHandle
GetModuleFileNameW
HeapCreate
HeapDestroy
SetHandleCount
GetFileType
GetStartupInfoW
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
FlushFileBuffers
ReadFile
SetFilePointer
HeapSize
FreeEnvironmentStringsW
InitializeCriticalSection

user32

ScreenToClient
GetForegroundWindow
GetCursorPos
MessageBoxA
GetAsyncKeyState

d3dx9_41

D3DXGetImageInfoFromResourceA
D3DXCreateSprite
D3DXCreateTextureFromResourceExA
D3DXCreateFontA
D3DXCreateLine

psapi

EnumProcesses

Exports

Exports

Direct3DCreate9

Sections

.text
Size: 232KB - Virtual size: 232KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

8c667facc3f511c9e167513ce2dd43b4

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

d3dx9_41

psapi

Exports

Exports

Sections

.text Size: 232KB - Virtual size: 232KB

.rsrc Size: 4KB - Virtual size: 4KB

.reloc Size: 16KB - Virtual size: 16KB

.text
Size: 232KB - Virtual size: 232KB

.rsrc
Size: 4KB - Virtual size: 4KB

.reloc
Size: 16KB - Virtual size: 16KB