ee4e9e7aa0aab029fc0265c3b3766e8be897db0d3c390bf159b2d4baa858b990

Sharing

Copy URL Twitter E-mail

General

Target

ee4e9e7aa0aab029fc0265c3b3766e8be897db0d3c390bf159b2d4baa858b990
Size

4.8MB
MD5

6ba084100686d4b84ba0fc4b62c0f761
SHA1

4aef81c4b3609de31378f963fed3b217a4eee058
SHA256

ee4e9e7aa0aab029fc0265c3b3766e8be897db0d3c390bf159b2d4baa858b990
SHA512

c8e2006517456bce2867acc4819bcd9d1ea833e967d059b2d8635846dce49778cb7895cbbe2290b716a2124489f77b5628c177da5113503776baa0475cc7f6f1
SSDEEP

98304:vw5KBfRhtZClboupejpSBAscHG4N2oHDP0+WUuh/ho/+Wi+0K3uOepEGcBywWRYX:vw5KB3ClMupSSKscHG4N2oHDP0RUY/cN

Score

N/A

Malware Config

Signatures

Files

ee4e9e7aa0aab029fc0265c3b3766e8be897db0d3c390bf159b2d4baa858b990
.exe windows x86

efb987ff1d5f7cbeb012500d83385a7c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

opengl32

glShadeModel
glClearColor
glTranslatef
glPopMatrix
glMultMatrixf
wglGetProcAddress
wglGetCurrentDC
glScalef
glPushMatrix
glVertex2i
glLineStipple
glVertex3f
glColor4f
glDrawElements
glColorPointer
glNormalPointer
glVertex2fv
glTexCoord2fv
glTexCoord2i
glTexCoord2f
glScissor
glVertex2f
glLineWidth
glDepthMask
glBlendFunc
glHint
glLoadIdentity
glMatrixMode
glGetError
glColor4ub
glEnd
glVertex3fv
glBegin
glTexCoordPointer
glVertexPointer
glDisable
glDisableClientState
glDrawArrays
glEnableClientState
glEnable
glColor4ubv
glPopAttrib
glViewport
glPushAttrib
glDeleteTextures
glTexParameteri
glTexImage2D
glBindTexture
glGenTextures
glReadPixels
glGetIntegerv
glDeleteLists
wglDeleteContext
glGetString
glClear
wglMakeCurrent
wglCreateContext
glFinish

glu32

gluBuild2DMipmaps
gluLookAt
gluPerspective
gluOrtho2D
gluErrorString

dsound

ord11

steam_api

SteamAPI_RestartAppIfNecessary
SteamAPI_Init
SteamAPI_UnregisterCallback
SteamUser
SteamAPI_RunCallbacks
SteamFriends
SteamAPI_SetMiniDumpComment
SteamAPI_WriteMiniDump
SteamAPI_RegisterCallback
SteamAPI_RegisterCallResult
SteamAPI_UnregisterCallResult
SteamRemoteStorage
SteamController

kernel32

IsDBCSLeadByte
GetCPInfo
FindClose
FindNextFileA
FindFirstFileA
FindNextFileW
FindFirstFileW
GetVersionExA
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
HeapFree
CreateDirectoryA
MultiByteToWideChar
ExitProcess
HeapAlloc
GetSystemTimeAsFileTime
RtlUnwind
GetTimeFormatA
GetDateFormatA
GetCommandLineA
GetStartupInfoA
HeapReAlloc
ExitThread
GetFileInformationByHandle
CreateProcessA
DuplicateHandle
MoveFileA
RaiseException
LCMapStringA
LCMapStringW
SetHandleCount
WideCharToMultiByte
GetFullPathNameA
GetFileAttributesW
GetFileAttributesA
GetModuleHandleA
GetDiskFreeSpaceA
GetDriveTypeA
GetSystemTime
FileTimeToLocalFileTime
FileTimeToSystemTime
SystemTimeToFileTime
LocalFileTimeToFileTime
LocalFree
GetModuleHandleW
SetConsoleCtrlHandler
GetModuleFileNameA
FlushFileBuffers
GetConsoleMode
SetThreadPriority
GetCurrentThread
SetPriorityClass
GetCurrentProcess
GetProcessHeap
SetEndOfFile
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetLocaleInfoW
GetStringTypeW
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
OutputDebugStringA
IsBadWritePtr
IsBadReadPtr
QueryPerformanceFrequency
QueryPerformanceCounter
DeleteFileA
GetTickCount
CreateMutexA
CloseHandle
WaitForSingleObject
ReleaseMutex
CreateThread
Sleep
GetCurrentThreadId
CreateEventA
SetEvent
ResetEvent
WaitForMultipleObjects
CreateFileA
SetFilePointer
WriteFile
ReadFile
CreateFileW
GetLastError
IsDebuggerPresent
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
SetLastError
SleepEx
FormatMessageA
PeekNamedPipe
GetFileType
GetStdHandle
FreeLibrary
GetProcAddress
LoadLibraryA
ExpandEnvironmentStringsA
GetLocaleInfoA
GetUserDefaultLCID
GetExitCodeProcess
CreatePipe
CompareStringW
CompareStringA
SetStdHandle
GetCurrentProcessId
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
IsValidCodePage
GetOEMCP
GetACP
GetTimeZoneInformation
InitializeCriticalSectionAndSpinCount
GetCurrentDirectoryA
VirtualAlloc
VirtualFree
HeapCreate
GetConsoleCP
HeapSize
TlsFree
SetFileTime
ReadConsoleA
SetEnvironmentVariableA
SetConsoleMode
TlsGetValue
TlsSetValue
TlsAlloc

user32

ReleaseCapture
SetCapture
GetClientRect
DispatchMessageA
TranslateMessage
CharToOemBuffA
CharLowerA
CharUpperA
OemToCharBuffA
OemToCharA
CharToOemA
ShowCursor
MessageBoxA
ToAscii
DefWindowProcA
EnumDisplaySettingsA
ChangeDisplaySettingsA
GetDC
IsWindow
ReleaseDC
LoadIconA
LoadCursorA
RegisterClassA
AdjustWindowRect
GetDesktopWindow
GetWindowRect
CreateWindowExA
ShowWindow
DestroyWindow
PeekMessageA
SetCursorPos

gdi32

SetPixelFormat
SwapBuffers
ChoosePixelFormat
GetStockObject

shell32

ShellExecuteA
SHGetFolderPathA

ole32

CoInitialize

sdl

SDL_CloseAudio
SDL_PauseAudio
SDL_GetError
SDL_OpenAudio
SDL_UnlockAudio
SDL_LockAudio

ws2_32

socket
WSACleanup
WSAStartup
WSAGetLastError
recv
send
setsockopt
getsockname
ntohs
bind
htons
getsockopt
getpeername
closesocket
listen
connect
WSASetLastError
freeaddrinfo
getaddrinfo
sendto
recvfrom
accept
__WSAFDIsSet
gethostname
ioctlsocket
select

wldap32

ord41
ord27
ord301
ord33
ord200
ord79
ord35
ord32
ord30
ord26
ord50
ord60
ord143
ord211
ord22
ord46

advapi32

AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
SetFileSecurityA
SetFileSecurityW

Exports

Exports

curl_easy_cleanup
curl_easy_duphandle
curl_easy_escape
curl_easy_getinfo
curl_easy_init
curl_easy_pause
curl_easy_perform
curl_easy_recv
curl_easy_reset
curl_easy_send
curl_easy_setopt
curl_easy_strerror
curl_easy_unescape
curl_escape
curl_formadd
curl_formfree
curl_formget
curl_free
curl_getdate
curl_getenv
curl_global_cleanup
curl_global_init
curl_global_init_mem
curl_maprintf
curl_mfprintf
curl_mprintf
curl_msnprintf
curl_msprintf
curl_multi_add_handle
curl_multi_assign
curl_multi_cleanup
curl_multi_fdset
curl_multi_info_read
curl_multi_init
curl_multi_perform
curl_multi_remove_handle
curl_multi_setopt
curl_multi_socket
curl_multi_socket_action
curl_multi_socket_all
curl_multi_strerror
curl_multi_timeout
curl_mvaprintf
curl_mvfprintf
curl_mvprintf
curl_mvsnprintf
curl_mvsprintf
curl_share_cleanup
curl_share_init
curl_share_setopt
curl_share_strerror
curl_slist_append
curl_slist_free_all
curl_strequal
curl_strnequal
curl_unescape
curl_version
curl_version_info

Sections

.text
Size: 3.8MB - Virtual size: 3.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 807KB - Virtual size: 806KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 48KB - Virtual size: 818KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rmnet
Size: 56KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

efb987ff1d5f7cbeb012500d83385a7c

Headers

DLL Characteristics

File Characteristics

Imports

opengl32

glu32

dsound

steam_api

kernel32

user32

gdi32

shell32

ole32

sdl

ws2_32

wldap32

advapi32

Exports

Exports

Sections

.text Size: 3.8MB - Virtual size: 3.8MB

.rdata Size: 807KB - Virtual size: 806KB

.data Size: 48KB - Virtual size: 818KB

.rsrc Size: 32KB - Virtual size: 31KB

.rmnet Size: 56KB - Virtual size: 60KB

.text
Size: 3.8MB - Virtual size: 3.8MB

.rdata
Size: 807KB - Virtual size: 806KB

.data
Size: 48KB - Virtual size: 818KB

.rsrc
Size: 32KB - Virtual size: 31KB

.rmnet
Size: 56KB - Virtual size: 60KB