cf4588897e50adc618704855562b85d47573b46e3bfff217293823efcf6a9266

Sharing

Copy URL Twitter E-mail

General

Target

cf4588897e50adc618704855562b85d47573b46e3bfff217293823efcf6a9266
Size

353KB
MD5

cc41c6c8f415157c4fc7da408bf778c3
SHA1

412624ae80df78079cccc7207d9a573c9a8f29da
SHA256

cf4588897e50adc618704855562b85d47573b46e3bfff217293823efcf6a9266
SHA512

2131fa405760de632f382928923382f8701b6203bc489df141d5d08e3f154a6ec4ad342e36b908d1e37852e83f09fca2f836eabca26b823281869a7ef5335dc6
SSDEEP

6144:YWXTWg8n4ZfUanOrS2bE3s3Ee3LmVsRvOqFDRFCgPRhcx5dl3q5:vTWyZvOGg73Ee39RGqFDRYCyr3q5

Score

N/A

Malware Config

Signatures

Files

cf4588897e50adc618704855562b85d47573b46e3bfff217293823efcf6a9266
.dll windows x86

702916eb8cde1275da2a2753945b26f4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DebugBreak
ExitProcess
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
FindFirstFileA
FindNextFileA
FindResourceA
FormatMessageA
FreeLibrary
GenerateConsoleCtrlEvent
GetCPInfo
GetCommandLineA
GetConsoleCursorInfo
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetFileSize
GetLocalTime
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetProcessHeap
GetProcessPriorityBoost
GetSystemTime
GetSystemTimeAsFileTime
GetTickCount
GetVersion
GetVersionExA
GetVersionExW
GlobalFix
GlobalMemoryStatus
CreateFileMappingA
HeapFree
InterlockedCompareExchange
InterlockedExchange
IsBadStringPtrA
LoadLibraryA
LoadResource
LocalFree
LockResource
MapViewOfFile
OutputDebugStringA
QueryPerformanceCounter
ReadFile
RtlUnwind
SearchPathA
SetFilePointer
SetLastError
SetUnhandledExceptionFilter
SystemTimeToFileTime
TerminateProcess
UnhandledExceptionFilter
UnmapViewOfFile
VirtualAlloc
VirtualAllocEx
VirtualFreeEx
WideCharToMultiByte
WriteFile
_lcreat
_llseek
lstrcmpA
lstrlenA
lstrlenW
CreateFileA
CreateDirectoryA
HeapAlloc
AreFileApisANSI

user32

GetWindowThreadProcessId
PeekMessageA
SetWindowTextA
TranslateMessage
wsprintfW
GetClassNameA
EnumWindows
EnumChildWindows
DispatchMessageA

advapi32

RegCloseKey
RegOpenKeyExW
RegOpenKeyExA

ole32

CoUninitialize
CoInitialize
CoCreateInstance

dbghelp

ImageNtHeader
ImageRvaToVa
SymCleanup
SymEnumSymbols
SymGetTypeInfo
SymInitialize
UnmapDebugInformation

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

msvcrt

wctomb
wcsrchr
wcsstr
_XcptFilter
__badioinfo
__dllonexit
__mb_cur_max
__pioinfo
_atoi64
_errno
_initterm
_iob
_isatty
_ismbblead
_ismbclower
_lock
_longjmpex
_lseeki64
_mbsspn
_onexit
_purecall
_read
_snprintf
_stricmp
_strlwr
_strnicmp
_strrev
_strtime
_unlock
_wcsicmp
_write
_wspawnv
atoi
calloc
clock
ferror
fopen
fprintf
free
gmtime
isalpha
isdigit
isleadbyte
isspace
isupper
iswprint
isxdigit
localeconv
malloc
mbtowc
memset
printf
rand
realloc
sprintf
strchr
strncmp
strrchr
strstr
strtoul
swprintf
time
tolower
vfprintf
wcschr
wcsncmp
wcsncpy

Exports

Exports

CheckTextureRequirements
CreatePolygon
GetWildcardSockaddr
LoadPRTBufferFromFileW
MatrixPerspectiveFovRH
MatrixPerspectiveRH
SaveFile
SetSocketInformation
mpegInSeekFrameExisting

Sections

.text
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 168KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

702916eb8cde1275da2a2753945b26f4

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

dbghelp

version

msvcrt

Exports

Exports

Sections

.text Size: 61KB - Virtual size: 60KB

.rdata Size: 168KB - Virtual size: 168KB

.data Size: 69KB - Virtual size: 69KB

.rsrc Size: 50KB - Virtual size: 50KB

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 61KB - Virtual size: 60KB

.rdata
Size: 168KB - Virtual size: 168KB

.data
Size: 69KB - Virtual size: 69KB

.rsrc
Size: 50KB - Virtual size: 50KB

.reloc
Size: 3KB - Virtual size: 3KB