d5f9218b5c306cc5a77227ca715550af6118f16634c96fd3b0b7118f7d5bdc1f

Sharing

Copy URL Twitter E-mail

General

Target

d5f9218b5c306cc5a77227ca715550af6118f16634c96fd3b0b7118f7d5bdc1f
Size

312KB
MD5

e1fd049d48f6a6c77cc8af9fcf0fe150
SHA1

71e56ff37093a71570d9abe0373d1b916338cf80
SHA256

d5f9218b5c306cc5a77227ca715550af6118f16634c96fd3b0b7118f7d5bdc1f
SHA512

5809a8a18d0cb4cfea246dc7621f42c1b1044bd8912fe153c930c4e2a9b1420c1dcce72a312a197d58cb91e3a266b099576fe0535af0103207a816c484b81d9a
SSDEEP

6144:wM9k0VB2y5PKLsjwdzF4lnIOkEb0S+B32spCrtn399WrONlt00exswQ:x9k0VB2KJDbXxnt0At00exs

Score

N/A

Malware Config

Signatures

Files

d5f9218b5c306cc5a77227ca715550af6118f16634c96fd3b0b7118f7d5bdc1f
.dll windows x86

1b42bfcb50d5dd4707842d42fdff4b57

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ord17

gdi32

SelectObject
SetBkMode
SetGraphicsMode
SetTextColor
SetViewportOrgEx
SetWindowOrgEx
SaveDC
CreateCompatibleDC
CreateFontIndirectA
CreateSolidBrush
DPtoLP
DeleteDC
DeleteObject
GetDeviceCaps
GetObjectA
RestoreDC
ModifyWorldTransform
CreateCompatibleBitmap
GetStockObject
BitBlt

kernel32

GetModuleHandleA
GetProcAddress
GetProcessHeap
GetProcessPriorityBoost
GetSystemTimeAsFileTime
GetThreadLocale
GetTickCount
GetVersionExA
GlobalAlloc
GlobalFree
GlobalHandle
GlobalLock
GlobalUnlock
HeapAlloc
HeapFree
InitializeCriticalSection
GetModuleFileNameA
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsDBCSLeadByte
IsProcessorFeaturePresent
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
LoadResource
LockResource
MulDiv
MultiByteToWideChar
QueryPerformanceCounter
RaiseException
SetLastError
SizeofResource
VirtualAlloc
VirtualFree
VirtualProtect
WideCharToMultiByte
lstrcmpA
lstrcmpiA
lstrcpynA
lstrlenA
lstrlenW
GetLocaleInfoA
GetLastError
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
GetACP
FreeLibrary
FlushInstructionCache
FindResourceA
ExitProcess
EnterCriticalSection
DisableThreadLibraryCalls
DeleteCriticalSection
InterlockedCompareExchange

ddraw

DirectDrawCreate
DirectDrawEnumerateW
DirectDrawEnumerateExW

advapi32

RegEnumKeyExA
RegCreateKeyExA
RegSetValueExA
RegQueryValueExA
RegQueryInfoKeyA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey

user32

GetClassInfoExA
GetClassNameA
GetClientRect
GetCursorPos
GetDC
GetDesktopWindow
GetDlgCtrlID
GetDlgItem
GetFocus
GetParent
GetSysColor
GetWindow
GetWindowLongA
GetWindowRect
GetWindowTextA
GetWindowTextLengthA
InvalidateRect
InvalidateRgn
IsChild
IsWindow
LoadCursorA
LoadStringA
MapDialogRect
MessageBoxA
PtInRect
RedrawWindow
RegisterClassExA
RegisterWindowMessageA
ReleaseCapture
ReleaseDC
SendMessageA
SetCapture
SetCursor
SetFocus
SetWindowContextHelpId
SetWindowLongA
SetWindowPos
SetWindowTextA
UnregisterClassA
wsprintfA
GetActiveWindow
FillRect
EndPaint
EndDialog
EnableWindow
DialogBoxIndirectParamA
DestroyWindow
DestroyAcceleratorTable
DefWindowProcA
CreateWindowExA
CreateAcceleratorTableA
CharNextA
CallWindowProcA
BeginPaint

oleaut32

SysStringByteLen
LoadTypeLi
VariantInit
VariantClear
VarUI4FromStr
SysStringLen
LoadRegTypeLi
SysFreeString
SysAllocStringLen
SysAllocString
OleCreateFontIndirect

ole32

CoCreateInstance
CoGetClassObject
CoTaskMemAlloc
CoTaskMemFree
CoTaskMemRealloc
CreateStreamOnHGlobal
OleInitialize
OleLockRunning
OleUninitialize
StringFromGUID2
CLSIDFromProgID
CLSIDFromString

shell32

ShellExecuteA

Exports

Exports

AssembleShaderFromFileW
CheckTextureRequirements
ComputeIMTFromPerTexelSignal
CreateEffectCompilerFromResourceA
CreateMeshFVF
FrameNumNamedMatrices
GetShaderInputSemantics
MatrixLookAtRH
SetComment
Vec3Normalize
Vec3TransformCoordArray
Vec4Hermite

Sections

.text
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 129KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 98KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1b42bfcb50d5dd4707842d42fdff4b57

Headers

DLL Characteristics

File Characteristics

Imports

comctl32

gdi32

kernel32

ddraw

advapi32

user32

oleaut32

ole32

shell32

Exports

Exports

Sections

.text Size: 51KB - Virtual size: 51KB

.rdata Size: 129KB - Virtual size: 128KB

.data Size: 30KB - Virtual size: 31KB

.rsrc Size: 98KB - Virtual size: 98KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 51KB - Virtual size: 51KB

.rdata
Size: 129KB - Virtual size: 128KB

.data
Size: 30KB - Virtual size: 31KB

.rsrc
Size: 98KB - Virtual size: 98KB

.reloc
Size: 2KB - Virtual size: 2KB