General

Malware Config

Signatures

Files

• 7a6b3debef45178d9f5439097a0842229e07497505a103bea49187cb6a913533

  .dll windows x86

  53bb0becea12e063c778f98784d7d3b3

  
  

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  ole32

  CreateStreamOnHGlobal

  msvcrt

  toupper

  tolower

  scanf

  qsort

  memset

  memmove

  memcpy

  malloc

  iswspace

  iswpunct

  iswdigit

  free

  abs

  _wpgmptr

  _wopen

  _vsnprintf

  _unlock

  _unloaddll

  _stricmp

  _onexit

  _lock

  _isnan

  _finite

  _cputs

  _amsg_exit

  __dllonexit

  __CxxFrameHandler

  _XcptFilter

  _CxxThrowException

  _CIsqrt

  _CIsin

  _CIcos

  _CIatan2

  _CIatan

  _CIacos

  gdi32

  SetTextColor

  SetMapMode

  SetLayout

  SetBkColor

  SelectObject

  MoveToEx

  GetTextMetricsW

  GetTextMetricsA

  GetObjectA

  GetGlyphOutlineA

  GetFontLanguageInfo

  GetEnhMetaFilePixelFormat

  GetCharacterPlacementW

  GetCharacterPlacementA

  ExtTextOutW

  ExtTextOutA

  DeleteObject

  CreateHalftonePalette

  CreateFontIndirectW

  CreateFontIndirectA

  CreateDiscardableBitmap

  CreateDIBSection

  AbortDoc

  TranslateCharsetInfo

  advapi32

  RegOpenKeyExA

  RegQueryValueExA

  RegEnumKeyExA

  RegCloseKey

  kernel32

  GetVersion

  GetTickCount

  GetTapeStatus

  HeapWalk

  WaitForSingleObject

  GetProcessAffinityMask

  GetProcAddress

  GetOverlappedResult

  InitializeCriticalSection

  InterlockedCompareExchange

  InterlockedDecrement

  InterlockedExchange

  InterlockedIncrement

  IsProcessorFeaturePresent

  LoadLibraryA

  LoadResource

  LocalUnlock

  LockResource

  MultiByteToWideChar

  OutputDebugStringA

  QueryPerformanceCounter

  ReadFile

  ReleaseMutex

  SetProcessAffinityMask

  SetUnhandledExceptionFilter

  SizeofResource

  TlsAlloc

  Toolhelp32ReadProcessMemory

  UnhandledExceptionFilter

  UnregisterWait

  VirtualAlloc

  GetSystemTimeAsFileTime

  WaitForMultipleObjects

  WideCharToMultiByte

  WriteFile

  WriteFileGather

  GetProcessPriorityBoost

  CloseHandle

  CreateFileA

  CreateMutexA

  CreateTapePartition

  CreateThread

  DebugBreak

  DeleteCriticalSection

  DisableThreadLibraryCalls

  EnterCriticalSection

  ExitProcess

  FindResourceA

  FindResourceW

  FreeLibrary

  GetACP

  GetCommandLineA

  GetCurrentProcess

  GetCurrentProcessId

  GetCurrentThreadId

  GetFileSize

  GetFileSizeEx

  GetFullPathNameW

  GetLastError

  GetModuleFileNameA

  GetModuleHandleA

  GetNumberOfConsoleInputEvents

  Exports

  Exports

  ChangeSeparator

  GetBBMainHwnd

  OptimizeFaces

  PreprocessShaderFromFileW

  RecvPacket

  VecSaveFile

  Sections

  .text

  Size: 78KB - Virtual size: 77KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 205KB - Virtual size: 205KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 70KB - Virtual size: 71KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 65KB - Virtual size: 64KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 5KB - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ