6a848a17cd692b6d30cf303ce0f90f925b6c676f5c1a623c2c4835f98c3b277c

Sharing

Copy URL Twitter E-mail

General

Target

6a848a17cd692b6d30cf303ce0f90f925b6c676f5c1a623c2c4835f98c3b277c
Size

309KB
MD5

299c8839857e250760ce22a3af6b05e0
SHA1

92edff297674bf4cd8825ea55d1508845f55f918
SHA256

6a848a17cd692b6d30cf303ce0f90f925b6c676f5c1a623c2c4835f98c3b277c
SHA512

c37b02d89256936b895ef5a0109cc943a593a1068184c04ab2052b138470c260886e9c88065a61980076572dfeedcd6090bb9b8ffe56bb556b2d70b2dd5eff49
SSDEEP

6144:UvG8uJph5hCJCPk1IUbQ2oZl7gQ76ju0++zkQnCyWkRbKiu:X8uf5kJRzkZHt+QSDWkAD

Score

N/A

Malware Config

Signatures

Files

6a848a17cd692b6d30cf303ce0f90f925b6c676f5c1a623c2c4835f98c3b277c
.dll windows x86

e6b58d7dbb7175465f5fcd99bc700ea1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ddraw

DDInternalUnlock
DDGetAttachedSurfaceLcl
DSoundHelp

user32

GetClassInfoExA
GetActiveWindow
FillRect
EndPaint
DragObject
DestroyWindow
DefWindowProcA
BeginPaint
CreateAcceleratorTableA
GetClassNameA
GetCursorPos
SetWindowTextA
SetWindowPos
SetWindowLongA
SetWindowContextHelpId
SetFocus
SetCursor
SetCapture
SendMessageA
ReleaseDC
ReleaseCapture
RegisterWindowMessageA
RedrawWindow
PtInRect
MessageBoxA
LoadStringA
LoadCursorA
IsWindow
IsChild
InvalidateRgn
InvalidateRect
GetWindowTextLengthA
GetWindowRect
GetWindow
GetSysColor
GetParent
GetMenuBarInfo
GetFocus
GetDlgItem
GetDlgCtrlID
GetDesktopWindow
CharNextA
GetDC

comctl32

ord17

shell32

DuplicateIcon
SHBindToParent
SHFreeNameMappings
SHGetInstanceExplorer
SHGetMalloc
SHGetSpecialFolderLocation
SHUpdateRecycleBinIcon
DragAcceptFiles

advapi32

RegCreateKeyExA
RegCloseKey
RegDeleteKeyA
RegDeleteValueA
RegSetValueExA
RegQueryValueExA
RegQueryInfoKeyA
RegOpenKeyExA
RegEnumKeyExA

kernel32

lstrcmpA
WideCharToMultiByte
VirtualProtect
VirtualFree
VirtualAlloc
SetLastError
ReadProcessMemory
RaiseException
QueryPerformanceCounter
MultiByteToWideChar
MulDiv
LockResource
LoadResource
LoadLibraryExA
LoadLibraryA
LeaveCriticalSection
IsProcessorFeaturePresent
IsDBCSLeadByte
InterlockedIncrement
InterlockedExchange
InterlockedDecrement
InterlockedCompareExchange
InitializeCriticalSection
HeapFree
HeapAlloc
GlobalUnlock
GlobalLock
GlobalHandle
GlobalFree
GlobalAlloc
GetTickCount
GetThreadLocale
GetSystemTimeAsFileTime
GetProcessPriorityBoost
GetProcessHeap
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetLocaleInfoA
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
GetACP
FlushInstructionCache
FindResourceA
ExitProcess
EnterCriticalSection
DisableThreadLibraryCalls
DeleteCriticalSection
lstrcmpiA

Exports

Exports

ConvertMeshSubsetToSingleStrip
CreateEffectPool
CreateFontW
CreateVolumeTextureFromFileInMemoryEx
CreateVolumeTextureFromResourceExW
GatherFragments
GetComment
GetJ2KOptions
LoadMeshHierarchyFromXInMemory
LoadPRTBufferFromFileA
MatrixInverse
MatrixTransformation
SimplifyMesh
mpegInOpenMPEGIdxW

Sections

.text
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 155KB - Virtual size: 155KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e6b58d7dbb7175465f5fcd99bc700ea1

Headers

File Characteristics

Imports

ddraw

user32

comctl32

shell32

advapi32

kernel32

Exports

Exports

Sections

.text Size: 56KB - Virtual size: 56KB

.rdata Size: 155KB - Virtual size: 155KB

.data Size: 42KB - Virtual size: 42KB

.rsrc Size: 51KB - Virtual size: 50KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 56KB - Virtual size: 56KB

.rdata
Size: 155KB - Virtual size: 155KB

.data
Size: 42KB - Virtual size: 42KB

.rsrc
Size: 51KB - Virtual size: 50KB

.reloc
Size: 2KB - Virtual size: 2KB