354d7871eee7d69a281b5e7cdee6bf81a255e6a2f77ac7c9ca9e068256d959bb

Sharing

Copy URL Twitter E-mail

General

Target

354d7871eee7d69a281b5e7cdee6bf81a255e6a2f77ac7c9ca9e068256d959bb
Size

84KB
MD5

7a364519cc53a750fcd165e686d81896
SHA1

b37ff5be98cf2e59c51676200e77297d8e2af782
SHA256

354d7871eee7d69a281b5e7cdee6bf81a255e6a2f77ac7c9ca9e068256d959bb
SHA512

54b22a746cd08b961421801aa3792834835759ecb19086d8c2ab437755bb9efab33f8310da767b5717eb5e13731d6c639dfb2465cfbc45c1f1556c49beb3089c
SSDEEP

1536:XphS54TsMJtzV5bCSNok1xin4uUlIIdqFruT4ncUdSZU1luVcmV:XpcyJlLbCXS0IdqFruT4nP1lSb

Score

N/A

Malware Config

Signatures

Files

354d7871eee7d69a281b5e7cdee6bf81a255e6a2f77ac7c9ca9e068256d959bb
.dll windows x86

177a04b2fc8164ed58714d744c107f53

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

timeGetTime

kernel32

TlsFree
Sleep
CloseHandle
WriteFile
SetFilePointer
CreateFileA
VirtualFreeEx
GetExitCodeThread
WaitForSingleObject
CreateRemoteThread
GetProcAddress
WriteProcessMemory
VirtualAllocEx
GetModuleHandleA
DisableThreadLibraryCalls
GetModuleFileNameA
SetLastError
VirtualProtect
FlushInstructionCache
GetCurrentProcess
LoadLibraryA
VirtualQuery
ExitProcess
GetLocalTime
GetDriveTypeA
GetCurrentDirectoryA
GetFullPathNameA
GetCurrentThreadId
GetCommandLineA
GetVersionExA
RtlUnwind
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapAlloc
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
TerminateProcess
TlsAlloc
GetLastError
TlsSetValue
TlsGetValue
HeapFree
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
UnhandledExceptionFilter
InterlockedExchange
VirtualAlloc
HeapReAlloc
InitializeCriticalSection
GetACP
GetOEMCP
GetCPInfo
LCMapStringA
MultiByteToWideChar
LCMapStringW
SetStdHandle
HeapSize
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
GetSystemInfo
FlushFileBuffers

Exports

Exports

CastSpellByID
CastSpellByName
ClearTarget
EjectExecuteDLL
GetAsyncTimeMs
GetAvgFrequency
GetChatlogPath
GetCurrentEvent
GetFrequency
InjectExecuteDLL
LeftClickTarget
LuaNoReturn
PickupAllLoot
PickupLoot
RightClickTarget
SendScript
SetAddChatMessagePtr
SetAntiAFKPtr
SetAutoStoreAllLootItemsPtr
SetCastSpellByIDPtr
SetCastSpellByNamePtr
SetChatlogPath
SetClearTargetPtr
SetDetourPtr
SetFrameScriptExecutePtr
SetLeftClickPtr
SetLootSlotPtr
SetMovementPtr
SetOsGetAsyncTimeMsPtr
SetReadAllLanguages
SetRightClickPtr
StartMovement
StopMovement
TimedMovement

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.shared
Size: 4KB - Virtual size: 664B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 840B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

177a04b2fc8164ed58714d744c107f53

Headers

File Characteristics

Imports

winmm

kernel32

Exports

Exports

Sections

.text Size: 40KB - Virtual size: 39KB

.rdata Size: 16KB - Virtual size: 13KB

.data Size: 8KB - Virtual size: 10KB

.shared Size: 4KB - Virtual size: 664B

.rsrc Size: 4KB - Virtual size: 840B

.reloc Size: 8KB - Virtual size: 5KB

.text
Size: 40KB - Virtual size: 39KB

.rdata
Size: 16KB - Virtual size: 13KB

.data
Size: 8KB - Virtual size: 10KB

.shared
Size: 4KB - Virtual size: 664B

.rsrc
Size: 4KB - Virtual size: 840B

.reloc
Size: 8KB - Virtual size: 5KB