85b75cce3de5764d4971cb4a50a1df7a19d4b2c3f1e5b234ce8b8702a71cd5a0

Sharing

Copy URL

Twitter E-mail

General

Target

85b75cce3de5764d4971cb4a50a1df7a19d4b2c3f1e5b234ce8b8702a71cd5a0
Size

309KB
MD5

82c01110c9cff636ac6607e84b7267ed
SHA1

4534be2fbacc73dfc4c77db6cb7f756a709066a8
SHA256

85b75cce3de5764d4971cb4a50a1df7a19d4b2c3f1e5b234ce8b8702a71cd5a0
SHA512

27cbacff91339e3bfd05d6278e17d5086965a6d80768299d32fc5efc571204704642c6b3e5491b50a290046eb2f86f2c9285b33ffc95f6191303ff27c90fb929
SSDEEP

6144:DsM44dgN/V5q27507SDKpkdU5iC2buiJnU0RfPMSaAd1VtfAPwntn5rbdHk:DsM44dgNN5bSadLBCsbf/nVdH

Score

N/A

Malware Config

Signatures

Files

85b75cce3de5764d4971cb4a50a1df7a19d4b2c3f1e5b234ce8b8702a71cd5a0
.dll windows x86

711ab95cc15d4abd306d4b2a2da166e0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsDBCSLeadByte
IsProcessorFeaturePresent
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
LoadResource
LockResource
MulDiv
MultiByteToWideChar
QueryPerformanceCounter
RaiseException
SetLastError
SizeofResource
VirtualAlloc
VirtualFree
VirtualProtect
WideCharToMultiByte
lstrcmpA
lstrcmpiA
lstrcpynA
lstrlenA
lstrlenW
DisableThreadLibraryCalls
EnterCriticalSection
ExitProcess
FindResourceA
FlushInstructionCache
FreeLibrary
GetACP
InterlockedIncrement
InterlockedExchange
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetProcessHeap
GetProcessPriorityBoost
GetSystemTimeAsFileTime
GetThreadLocale
InterlockedDecrement
InterlockedCompareExchange
InitializeCriticalSection
HeapFree
HeapAlloc
GlobalUnlock
GlobalLock
GlobalHandle
GlobalFree
GlobalAlloc
GetVersionExA
GetTickCount
DeleteCriticalSection

shell32

DragAcceptFiles
SHExtractIconsW
SHGetMalloc
SHGetSpecialFolderLocation
SHLoadNonloadedIconOverlayIdentifiers
ExtractIconW

comctl32

ord17

oleaut32

VariantInit
VariantClear
VarUI4FromStr
VarDecFromI2
SysStringLen
SysFreeString
SysAllocStringLen
LoadRegTypeLi
LoadTypeLi
SafeArrayCreateVector
SysAllocString

gdi32

SetTextColor
SetGraphicsMode
SetViewportOrgEx
SetWindowOrgEx
SelectObject
SaveDC
RestoreDC
PlayEnhMetaFile
ModifyWorldTransform
GetStockObject
GetObjectA
GetDeviceCaps
DeleteObject
DPtoLP
CreateSolidBrush
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
SetBkMode

user32

GetActiveWindow
GetClassInfoExA
GetClientRect
GetCursorPos
GetDC
GetDesktopWindow
GetDlgCtrlID
GetDlgItem
GetFocus
GetParent
GetWindow
GetWindowRect
GetWindowTextA
CreateWindowExA
InvalidateRgn
IsWindow
LoadStringA
MapDialogRect
FillRect
PtInRect
RedrawWindow
RegisterClassExA
RegisterWindowMessageA
ReleaseCapture
ReleaseDC
SendMessageA
SetCapture
SetCursor
SetWindowContextHelpId
SetWindowLongA
SetWindowTextA
UnregisterClassA
wsprintfA
CopyImage
CharNextA
CallWindowProcA
BeginPaint
EndPaint
EndDialog
EnableWindow
DestroyWindow
DeregisterShellHookWindow
MessageBoxA
DefWindowProcA
GetWindowTextLengthA

ddraw

DirectDrawCreateClipper

advapi32

RegSetValueExA
RegQueryValueExA
RegQueryInfoKeyA
RegOpenKeyExA
RegEnumKeyExA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegCloseKey

Exports

Exports

ConvertMeshSubsetToSingleStrip
CreateEffectPool
CreateFontW
CreateVolumeTextureFromFileInMemoryEx
CreateVolumeTextureFromResourceExW
GatherFragments
GetComment
GetJ2KOptions
LoadMeshHierarchyFromXInMemory
LoadPRTBufferFromFileA
MatrixInverse
MatrixTransformation
SimplifyMesh
mpegInOpenMPEGIdxW

Sections

.text
Size: 63KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 160KB - Virtual size: 159KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

711ab95cc15d4abd306d4b2a2da166e0

Headers

File Characteristics

Imports

kernel32

shell32

comctl32

oleaut32

gdi32

user32

ddraw

advapi32

Exports

Exports

Sections

.text Size: 63KB - Virtual size: 62KB

.rdata Size: 160KB - Virtual size: 159KB

.data Size: 43KB - Virtual size: 43KB

.rsrc Size: 38KB - Virtual size: 38KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 63KB - Virtual size: 62KB

.rdata
Size: 160KB - Virtual size: 159KB

.data
Size: 43KB - Virtual size: 43KB

.rsrc
Size: 38KB - Virtual size: 38KB

.reloc
Size: 4KB - Virtual size: 3KB