971553152a1f1ee5da708cd6819f1aa91b859fbd5058a0d8b774ead6f1aa1ca7

Sharing

Copy URL Twitter E-mail

General

Target

971553152a1f1ee5da708cd6819f1aa91b859fbd5058a0d8b774ead6f1aa1ca7
Size

328KB
MD5

5181d61566877d279e9ded08d21fc1df
SHA1

83d68d9d25ee6c735052a2ba177185e69967d991
SHA256

971553152a1f1ee5da708cd6819f1aa91b859fbd5058a0d8b774ead6f1aa1ca7
SHA512

c8201a727f69785fdc53e6f06251eb287b210e6640819d449ac71c3c8b644ca483683d276c60a8d78154883bdd9f8e237adf51d16aa603d4332f1179880851e4
SSDEEP

6144:wb8VXVNZ6HzHSkxuXExGCcQVf9KOLtl8lG+CSish:9hbZ6HDpQExbcQT7Lj8lG+tZ

Score

N/A

Malware Config

Signatures

Files

971553152a1f1ee5da708cd6819f1aa91b859fbd5058a0d8b774ead6f1aa1ca7
.exe windows x86

d04b3078c3a82460b40c819959256e66

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetACP
GetCPInfo
GetCommandLineA
GetConsoleCP
GetConsoleMode
GetConsoleOutputCP
GetCurrentDirectoryA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDateFormatA
GetDateFormatW
GetDiskFreeSpaceA
GetDiskFreeSpaceExA
GetDiskFreeSpaceExW
GetDriveTypeA
GetEnvironmentStringsA
GetEnvironmentStringsW
GetExitCodeProcess
GetFileAttributesA
GetFileAttributesW
GetFileSize
GetFileSizeEx
GetFileTime
GetFileType
GetFullPathNameA
GetFullPathNameW
GetLastError
GetLocalTime
GetLocaleInfoA
GetLocaleInfoW
GetLogicalDriveStringsA
GetLogicalDrives
GetLongPathNameA
GetModuleFileNameA
GetModuleHandleA
GetModuleHandleW
GetOEMCP
GetPrivateProfileStringA
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetStringTypeW
GetSystemDirectoryA
GetSystemTimeAsFileTime
GetThreadLocale
GetTickCount
GetTimeFormatA
GetTimeFormatW
GetTimeZoneInformation
GetUserDefaultLCID
GetVersionExA
GetVolumeInformationA
HeapAlloc
HeapFree
InitializeCriticalSection
InterlockedDecrement
FreeLibrary
InterlockedIncrement
IsDebuggerPresent
IsValidCodePage
IsValidLocale
LCMapStringA
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
MapViewOfFile
MoveFileA
MoveFileExW
MultiByteToWideChar
OpenEventA
OpenFileMappingA
OpenProcess
OutputDebugStringA
PeekNamedPipe
QueryPerformanceCounter
RaiseException
ReadFile
ReleaseMutex
RemoveDirectoryW
RtlUnwind
SetEndOfFile
SetEnvironmentVariableA
SetEnvironmentVariableW
SetErrorMode
SetEvent
SetFileAttributesA
SetFileAttributesW
SetFilePointer
SetFilePointerEx
SetHandleCount
SetLastError
SetProcessShutdownParameters
SetProcessWorkingSetSize
SetStdHandle
SetUnhandledExceptionFilter
Sleep
SleepEx
SystemTimeToFileTime
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
UnmapViewOfFile
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
WriteConsoleA
WriteConsoleW
WriteFile
WriteFileEx
lstrlenA
FreeEnvironmentStringsW
FreeEnvironmentStringsA
FlushFileBuffers
FindNextFileW
FindNextFileA
FindFirstFileW
FindFirstFileA
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
FileTimeToDosDateTime
ExitProcess
EnumSystemLocalesA
EnterCriticalSection
DuplicateHandle
DeviceIoControl
DeleteFileW
DeleteFileA
DeleteCriticalSection
CreatePipe
CreateMutexA
CreateFileW
CreateFileMappingA
CreateFileA
CreateEventA
CreateDirectoryW
CopyFileA
CompareStringW
CompareStringA
InterlockedExchange
CloseHandle

advapi32

RegEnumKeyExW
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
StartServiceA
SetSecurityDescriptorDacl
RegSetValueExA
RegQueryValueExW
RegQueryValueExA
RegQueryInfoKeyA
RegOpenKeyExW
RegOpenKeyExA
RegOpenKeyA
RegEnumValueA
CloseServiceHandle
RegEnumKeyExA
RegDeleteValueA
RegCreateKeyExA
RegCreateKeyA
RegCloseKey
QueryServiceStatus
QueryServiceConfigA
OpenServiceA
OpenSCManagerA
InitializeSecurityDescriptor

oleaut32

SysAllocString
VariantInit
VariantClear
SysFreeString

ws2_32

setsockopt
shutdown
socket
sendto
send
select
recvfrom
recv
ntohs
ntohl
listen
ioctlsocket
htons
htonl
gethostbyname
connect
closesocket
bind
accept
__WSAFDIsSet
WSAStartup
WSACreateEvent
WSAEnumNetworkEvents
WSAEventSelect
WSACleanup

user32

RegisterWindowMessageA
PostMessageA
MessageBoxA
IsWindow
GetWindowThreadProcessId
GetWindowLongA
GetWindowInfo
GetSystemMetrics
GetDC
GetClassNameA
EnumWindows
EnumDisplayDevicesA

gdi32

GetDeviceCaps
ExtEscape
CreateDCA
DeleteDC

ole32

CoSetProxyBlanket
CoInitialize
CoCreateInstance
PropVariantClear
CoUninitialize

shell32

ShellExecuteA
ShellExecuteExA
SHGetFolderPathA

Exports

Exports

Breakpad_SteamMiniDumpInit
Breakpad_SteamSetAppID
Breakpad_SteamSetSteamID
Breakpad_SteamWriteMiniDumpSetComment
Breakpad_SteamWriteMiniDumpUsingExceptionInfoWithBuildId
CreateInterface
Steam_BConnected
Steam_BGetCallback
Steam_BLoggedOn
Steam_BReleaseSteamPipe
Steam_ConnectToGlobalUser
Steam_CreateGlobalUser
Steam_CreateLocalUser
Steam_CreateSteamPipe
Steam_FreeLastCallback
Steam_GSBLoggedOn
Steam_GSBSecure
Steam_GSGetSteam2GetEncryptionKeyToSendToNewClient
Steam_GSGetSteamID
Steam_GSLogOff
Steam_GSLogOn
Steam_GSRemoveUserConnect
Steam_GSSendSteam2UserConnect
Steam_GSSendSteam3UserConnect
Steam_GSSendUserDisconnect
Steam_GSSendUserStatusResponse
Steam_GSSetServerType
Steam_GSSetSpawnCount
Steam_GSUpdateStatus
Steam_GetAPICallResult
Steam_GetGSHandle
Steam_InitiateGameConnection
Steam_LogOff
Steam_LogOn
Steam_ReleaseUser
Steam_SetLocalIPBinding
Steam_TerminateGameConnection

Sections

.text
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 116KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d04b3078c3a82460b40c819959256e66

Headers

File Characteristics

Imports

kernel32

advapi32

oleaut32

ws2_32

user32

gdi32

ole32

shell32

Exports

Exports

Sections

.text Size: 100KB - Virtual size: 100KB

.rdata Size: 116KB - Virtual size: 116KB

.data Size: 80KB - Virtual size: 1.7MB

.idata Size: 8KB - Virtual size: 8KB

.rsrc Size: 20KB - Virtual size: 20KB

.text
Size: 100KB - Virtual size: 100KB

.rdata
Size: 116KB - Virtual size: 116KB

.data
Size: 80KB - Virtual size: 1.7MB

.idata
Size: 8KB - Virtual size: 8KB

.rsrc
Size: 20KB - Virtual size: 20KB