11dbfab835188760e4d4e4c98ab0a8dd5c9e93603f4b8b54416badefcd831f1b

Sharing

Copy URL

Twitter E-mail

General

Target

11dbfab835188760e4d4e4c98ab0a8dd5c9e93603f4b8b54416badefcd831f1b
Size

73KB
MD5

f7f3bee14f0641b40acf4dbba1470290
SHA1

4ee09553f95f7350aaaa7e57e76050ddd05b61f1
SHA256

11dbfab835188760e4d4e4c98ab0a8dd5c9e93603f4b8b54416badefcd831f1b
SHA512

05e34037288e02e7bece2530884e1eee82d37e9487c13c336b738c4c259988a7230af46ef139d309012e21dc701d615206e8672d0cd4ece720cf2c9139fe0b70
SSDEEP

1536:Oezbf7o518khOwF4yZqUm+AbV6UxoLu2Lu/nolodYvYj:/3f7o518kUwF4yZl/AbVBoLu2LunoWAg

Score

N/A

Malware Config

Signatures

Files

11dbfab835188760e4d4e4c98ab0a8dd5c9e93603f4b8b54416badefcd831f1b
.dll windows x86

300a4f1d1e1be22e7aae63694302cc8d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcess
VirtualProtect
CreateThread
IsBadReadPtr
Sleep
DisableThreadLibraryCalls
LoadLibraryA
GetModuleHandleA
InterlockedCompareExchange
TerminateProcess
InterlockedExchange
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter

user32

GetAsyncKeyState
SetRect
MessageBoxA
GetSystemMetrics

d3dx9_43

D3DXVec3Project
D3DXCreateFontA

msvcr90

_crt_debugger_hook
__CppXcptFilter
_except_handler4_common
__clean_type_info_names_internal
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_encoded_null
free
_malloc_crt
_decode_pointer
_onexit
_lock
_CIsin
__dllonexit
_unlock
??2@YAPAXI@Z
malloc
_vsnprintf
??_U@YAPAXI@Z
sprintf
_CIsqrt
__CxxFrameHandler3
memset
_CIcos
_CIatan2
_encode_pointer
memcpy

msvcp90

??_D?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@XZ

Sections

_TEXT
Size: 512B - Virtual size: 431B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 43KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

300a4f1d1e1be22e7aae63694302cc8d

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

d3dx9_43

msvcr90

msvcp90

Sections

_TEXT Size: 512B - Virtual size: 431B

.text Size: 17KB - Virtual size: 17KB

.rdata Size: 7KB - Virtual size: 6KB

.data Size: 43KB - Virtual size: 148KB

.rsrc Size: 1024B - Virtual size: 688B

.reloc Size: 2KB - Virtual size: 2KB

_TEXT
Size: 512B - Virtual size: 431B

.text
Size: 17KB - Virtual size: 17KB

.rdata
Size: 7KB - Virtual size: 6KB

.data
Size: 43KB - Virtual size: 148KB

.rsrc
Size: 1024B - Virtual size: 688B

.reloc
Size: 2KB - Virtual size: 2KB