e9bbf7f9717adcbd1e1a6f78cc1b37336b006cc5525a9cf99fb9f1251ac3fe68

Sharing

Copy URL

Twitter E-mail

General

Target

e9bbf7f9717adcbd1e1a6f78cc1b37336b006cc5525a9cf99fb9f1251ac3fe68
Size

1.6MB
MD5

91d7ff69018a0b1f1fcfe27ea2afcad0
SHA1

51ac0109ce048de417a187019bbcf95216192ba9
SHA256

e9bbf7f9717adcbd1e1a6f78cc1b37336b006cc5525a9cf99fb9f1251ac3fe68
SHA512

1e9d00b09b98a7c63a3fbf73e2c1d951d83fa1d815820435e62a51aefa4b59b3c6cbe0409dadd292accec65bb760f7f33cc8ba808cb46164f9d3b7b8b6fd240d
SSDEEP

49152:HHr/BqOiGHIfvoHNYs9hR0u0JxvSze8QZ8O+fi:TBqSHIfiNAJRG6

Score

N/A

Malware Config

Signatures

Files

e9bbf7f9717adcbd1e1a6f78cc1b37336b006cc5525a9cf99fb9f1251ac3fe68
.dll windows x86

3108f16b005844c9d4dac6b1b6ff7f23

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

d3d8thk

OsThunkDdSetGammaRamp
OsThunkDdCreateSurfaceEx
OsThunkDdCreateSurface
OsThunkDdCreateD3DBuffer
OsThunkDdAttachSurface
OsThunkDdCreateSurfaceObject
OsThunkDdCanCreateSurface
OsThunkDdCanCreateD3DBuffer
OsThunkD3dContextCreate
OsThunkD3dContextDestroy
OsThunkD3dContextDestroyAll
OsThunkDdGetDriverState
OsThunkD3dValidateTextureStageState
OsThunkD3dDrawPrimitives2
OsThunkDdGetScanLine
OsThunkDdQueryDirectDrawObject
OsThunkDdBlt
OsThunkDdReenableDirectDrawObject
OsThunkDdFlip
OsThunkDdGetDC
OsThunkDdDeleteDirectDrawObject
OsThunkDdGetDriverInfo
OsThunkDdQueryMoCompStatus
OsThunkDdRenderMoComp
OsThunkDdEndMoCompFrame
OsThunkDdBeginMoCompFrame
OsThunkDdDestroyMoComp
OsThunkDdCreateMoComp
OsThunkDdGetMoCompBuffInfo
OsThunkDdGetInternalMoCompInfo
OsThunkDdGetMoCompFormats
OsThunkDdGetMoCompGuids
OsThunkDdGetAvailDriverMemory
OsThunkDdFlipToGDISurface
OsThunkDdSetExclusiveMode
OsThunkDdWaitForVerticalBlank
OsThunkDdGetFlipStatus
OsThunkDdGetBltStatus
OsThunkDdUnlock
OsThunkDdUnlockD3D
OsThunkDdLock
OsThunkDdLockD3D
OsThunkDdResetVisrgn
OsThunkDdReleaseDC
OsThunkDdDeleteSurfaceObject
OsThunkDdDestroySurface
OsThunkDdDestroyD3DBuffer

msvcrt

_onexit
__dllonexit
_except_handler3
?terminate@@YAXXZ
??1type_info@@UAE@XZ
_adjust_fdiv
_initterm
memmove
realloc
free
malloc
strstr
isalnum
sscanf
_purecall
_strlwr
wcsrchr
atoi
ceil
_stricmp
_vsnprintf
floor
_CIpow
__CxxFrameHandler
_ftol
_snprintf
qsort
?what@exception@@UBEPBDXZ
??0exception@@QAE@ABQBD@Z
??1exception@@UAE@XZ
fflush
fwrite
??0exception@@QAE@ABV0@@Z
fopen
sprintf
strchr
??0exception@@QAE@XZ
fclose
calloc
_CxxThrowException

user32

PtInRect
GetCursorPos
SetCursorPos
GetCursor
SetCursor
DestroyIcon
GetDesktopWindow
GetWindowDC
CreateIconIndirect
mouse_event
SetForegroundWindow
SetRect
GetClientRect
ClientToScreen
EnumDisplaySettingsA
OffsetRect
IntersectRect
GetSystemMetrics
LoadStringA
GetMonitorInfoA
GetDC
ReleaseDC
SystemParametersInfoA
GetUserObjectInformationA
CloseDesktop
GetThreadDesktop
IsWindow
GetWindowThreadProcessId
KillTimer
SetWindowLongA
CallWindowProcA
SendMessageA
IsIconic
PostMessageA
GetWindowLongA
GetKeyState
DefWindowProcA
SetWindowPos
GetForegroundWindow
IsWindowVisible
ShowWindow
IsZoomed
SetTimer
ChangeDisplaySettingsA
wsprintfA
OpenInputDesktop

advapi32

RegDeleteValueA
RegCreateKeyExA
RegSetValueExA
RegQueryInfoKeyA
RegEnumValueA
RegOpenKeyA
GetSidLengthRequired
InitializeSid
GetSidSubAuthority
GetLengthSid
InitializeAcl
AddAccessAllowedAce
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegOpenKeyExA
RegQueryValueExA
RegCloseKey

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

winmm

timeEndPeriod
timeBeginPeriod

gdi32

DeleteDC
GetNearestColor
CreateDCA
GdiEntry13
GetRegionData
DeleteObject
GetRandomRgn
CreateRectRgn
GetDIBits
CreateCompatibleBitmap
GetDeviceGammaRamp
SelectObject
CreateDIBSection
CreateCompatibleDC
StretchBlt
SetStretchBltMode
BitBlt
GdiEntry1
GetSystemPaletteEntries
CreateDIBitmap
GetDeviceCaps

kernel32

Sleep
QueryPerformanceFrequency
QueryPerformanceCounter
GetTickCount
LocalFree
LocalAlloc
VerSetConditionMask
VerifyVersionInfoA
LeaveCriticalSection
GetCurrentThread
SetThreadPriority
ResumeThread
SetThreadAffinityMask
GetProcessAffinityMask
GetTempPathA
TlsGetValue
TlsSetValue
GetEnvironmentVariableA
TlsAlloc
CreateEventA
CreateThread
ExitThread
SetEvent
WaitForMultipleObjects
VirtualProtect
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
DebugBreak
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
EnterCriticalSection
CreateSemaphoreA
WaitForSingleObject
ReleaseSemaphore
CloseHandle
WideCharToMultiByte
GetVersionExA
CreateFileA
MultiByteToWideChar
SetFilePointer
ReadFile
MoveFileA
DeleteFileA
WriteFile
GetFileSize
GetModuleFileNameA
GetPrivateProfileStringA
ConnectNamedPipe
SetNamedPipeHandleState
DisconnectNamedPipe
FlushFileBuffers
ReleaseMutex
PeekNamedPipe
TransactNamedPipe
WaitNamedPipeA
CreateNamedPipeA
GetSystemInfo
GetCurrentThreadId
lstrcmpA
GetLastError
InterlockedIncrement
DeleteCriticalSection
InitializeCriticalSection
FreeLibrary
GetProcAddress
LoadLibraryA
InterlockedExchange
SetErrorMode
InterlockedDecrement
GetSystemDirectoryA
GetModuleHandleA
lstrcpynA
OutputDebugStringA
OpenMutexA
CreateMutexA
DisableThreadLibraryCalls
GetCurrentProcessId
InterlockedCompareExchange

Exports

Exports

CheckFullscreen
D3DPERF_BeginEvent
D3DPERF_EndEvent
D3DPERF_GetStatus
D3DPERF_QueryRepeatFrame
D3DPERF_SetMarker
D3DPERF_SetOptions
D3DPERF_SetRegion
DebugSetLevel
DebugSetMute
Direct3DCreate9
Direct3DShaderValidatorCreate9
PSGPError
PSGPSampleTexture

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3108f16b005844c9d4dac6b1b6ff7f23

Headers

File Characteristics

Imports

d3d8thk

msvcrt

user32

advapi32

version

winmm

gdi32

kernel32

Exports

Exports

Sections

.text Size: 1.5MB - Virtual size: 1.5MB

.data Size: 17KB - Virtual size: 40KB

.rsrc Size: 1024B - Virtual size: 992B

.reloc Size: 52KB - Virtual size: 52KB

.text
Size: 1.5MB - Virtual size: 1.5MB

.data
Size: 17KB - Virtual size: 40KB

.rsrc
Size: 1024B - Virtual size: 992B

.reloc
Size: 52KB - Virtual size: 52KB