b622ea94fb1af9c5ff758c99642093923b667163d0e80f7cadd0e914750c58ed

Sharing

Copy URL Twitter E-mail

General

Target

b622ea94fb1af9c5ff758c99642093923b667163d0e80f7cadd0e914750c58ed
Size

114KB
MD5

5e579f553922f8ab500172f138855520
SHA1

46b055c26fbee6a2aa710885343a38e6dd1349fc
SHA256

b622ea94fb1af9c5ff758c99642093923b667163d0e80f7cadd0e914750c58ed
SHA512

83265d27687a40803c84a9ac319c242272ec8b2952c8b9337dee0ee9d9dc2a1672ffc9f7ff03a078c368e4daa1a33f7e7b738accfe0175b0a9a0850869b203d5
SSDEEP

3072:g/cVH8OZXDAY7xdmYGvN8C76As8OV8hizXJMTrjsTa9EL+:LVcOZXDh7D+8q6qNOXJlqE+

Score

N/A

Malware Config

Signatures

Files

b622ea94fb1af9c5ff758c99642093923b667163d0e80f7cadd0e914750c58ed
.dll windows x86

5b8f6812b35910a2ed1925eab59a1545

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetActiveWindow

msvcp100

?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z

msvcr100

??2@YAPAXI@Z
fscanf
vsprintf
_unlock
__dllonexit
_lock
_onexit
_malloc_crt
fprintf
_encoded_null
memset
_initterm_e
_amsg_exit
__CppXcptFilter
fclose
_except_handler4_common
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
_crt_debugger_hook
setvbuf
fopen
vsprintf_s
__iob_func
memmove
??0exception@std@@QAE@ABV01@@Z
??0exception@std@@QAE@ABQBD@Z
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
vfprintf
??3@YAXPAX@Z
_CxxThrowException
__CxxFrameHandler3
free
_initterm
memcpy

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
InterlockedExchange
DecodePointer
EncodePointer
IsDebuggerPresent

Exports

Exports

DEV9about
DEV9close
DEV9configure
DEV9dmaInterrupt
DEV9dmaRead
DEV9dmaWrite
DEV9init
DEV9irqCallback
DEV9irqHandler
DEV9open
DEV9read16
DEV9read32
DEV9read8
DEV9readDMA8Mem
DEV9setSettingsDir
DEV9shutdown
DEV9test
DEV9write16
DEV9write32
DEV9write8
DEV9writeDMA8Mem
PS2EgetLibName
PS2EgetLibType
PS2EgetLibVersion2

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 99KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

5b8f6812b35910a2ed1925eab59a1545

Headers

DLL Characteristics

File Characteristics

Imports

user32

msvcp100

msvcr100

kernel32

Exports

Exports

Sections

.text Size: 7KB - Virtual size: 7KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 512B - Virtual size: 65KB

.rsrc Size: 512B - Virtual size: 436B

.reloc Size: 1KB - Virtual size: 1KB

.text Size: 99KB - Virtual size: 100KB

.text
Size: 7KB - Virtual size: 7KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 65KB

.rsrc
Size: 512B - Virtual size: 436B

.reloc
Size: 1KB - Virtual size: 1KB

.text
Size: 99KB - Virtual size: 100KB