883809c40ef9639eadb6dc9c75722ba74dadb0b379eecd04bebee652dc87c746

Sharing

Copy URL Twitter E-mail

General

Target

883809c40ef9639eadb6dc9c75722ba74dadb0b379eecd04bebee652dc87c746
Size

1.4MB
MD5

5a449d12748b5c60ec4accdaa721f2af
SHA1

2d424a750614583b380f4e16f3ed4c0382038a64
SHA256

883809c40ef9639eadb6dc9c75722ba74dadb0b379eecd04bebee652dc87c746
SHA512

3c55c7e7e25b7c640fdef2ecbac308f096f1719bf8fdfa9a0a38bbdf7900f899addb0cd53e6dcd7f585a559d011c67486b1aeb6bd47ab3d03307cb9e4bb339cc
SSDEEP

24576:JrdZQEn7wiTtEOyg+bsCW5ywTf0Xs1P4T:9dZQE0XOoQGwTf0XuM

Score

N/A

Malware Config

Signatures

Files

883809c40ef9639eadb6dc9c75722ba74dadb0b379eecd04bebee652dc87c746
.dll windows x86

63cccdd3ce6765df49c0252b9eb5a2b2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_except_handler4_common
_onexit
_lock
_ftol2
memcpy
_vsnwprintf
_amsg_exit
_CIsqrt
__dllonexit
_unlock
_wtof
memset
_finite
_isnan
memmove
_purecall
_ftol2_sse
modf
wcsstr
wcschr
wcstol
_XcptFilter
malloc
free
_initterm
_CIlog

ntdll

RtlInitializeBitMap
RtlSetBits
RtlFindClearBitsAndSet
RtlClearBits
WinSqmIsOptedIn
DbgPrompt
DbgPrintEx
RtlCaptureStackBackTrace
WinSqmAddToStream
NtQuerySystemInformation
NtQueryInformationProcess
RtlNtStatusToDosError
RtlInterlockedFlushSList
RtlIsGenericTableEmpty
RtlEnumerateGenericTableWithoutSplaying
RtlDeleteElementGenericTable
RtlInsertElementGenericTable
RtlLookupElementGenericTable
RtlInitializeGenericTable
NtUnmapViewOfSection
NtMapViewOfSection
NtCreateSection

kernel32

LeaveCriticalSection
OpenEventW
ReleaseSemaphore
SetEvent
InterlockedIncrement
CreateEventW
WaitForSingleObject
DuplicateHandle
ResetEvent
WaitForMultipleObjects
GetCurrentProcessId
CreateWaitableTimerW
SetWaitableTimer
Sleep
MapViewOfFile
VirtualQuery
UnmapViewOfFile
EnterCriticalSection
LoadLibraryW
LocalFree
CreateThread
CreateFileMappingW
LocalAlloc
ReadFile
CancelIo
GetOverlappedResult
WriteFile
SetThreadPriority
QueryPerformanceFrequency
QueryPerformanceCounter
PulseEvent
InitializeSListHead
InterlockedPushEntrySList
InterlockedExchange
GetTickCount
OpenSemaphoreW
VirtualLock
GetProcessWorkingSetSize
SetProcessWorkingSetSize
DisableThreadLibraryCalls
OutputDebugStringW
GetCurrentThreadId
ExitProcess
IsDebuggerPresent
IsProcessorFeaturePresent
HeapAlloc
HeapReAlloc
GetProcessHeap
DebugBreak
TerminateProcess
TerminateThread
GetCurrentThread
UnhandledExceptionFilter
SetUnhandledExceptionFilter
CloseHandle
GetCurrentProcess
InterlockedDecrement
SetLastError
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LoadLibraryExA
InterlockedCompareExchange
FreeLibrary
GetLastError
GetProcAddress
DelayLoadFailureHook
GetSystemTimeAsFileTime
LockResource
LoadResource
FindResourceW
InterlockedExchangeAdd
QueryDepthSList
InterlockedFlushSList
SleepEx
CompareStringOrdinal
GetSystemInfo
GetVersionExW
GetModuleHandleW
HeapFree

user32

GetGuiResources
SystemParametersInfoW
GetMonitorInfoW
EnumDisplayMonitors
QueryDisplayConfig
GetDisplayConfigBufferSizes
EqualRect
IntersectRect
OffsetRect
CopyRect
ord1553
ClientToScreen
GetClientRect
InvalidateRect
PostMessageW
EnumDisplayDevicesW
IsWindow
SfmDxSetSwapChainStats
EnumDisplaySettingsW
SetLayeredWindowAttributes
SetRect
SfmDxReportPendingBindingsToDwm
SfmDxOpenSwapChain
SfmDxReleaseSwapChain
SfmDxSetSwapChainBindingStatus
SfmDxQuerySwapChainBindingStatus
IsRectEmpty

gdi32

ord1006
ord1007
ord1009
ord1003
CreateDCW
D3DKMTOpenAdapterFromHdc
D3DKMTGetPresentQueueEvent
DeleteDC
D3DKMTCloseAdapter
ord1000
D3DKMTGetPresentHistory
GetRegionData
RectInRegion
ord1004
GdiEntry13
GetDeviceCaps
CreateICW
ord1010
ord1005
ord1002
DeleteObject
GetRgnBox
CreateRectRgnIndirect
CreateRectRgn
SetRectRgn
CombineRgn
OffsetRgn
D3DKMTOpenAdapterFromGdiDisplayName
D3DKMTQueryAdapterInfo
ord1011

advapi32

EventWrite
EventEnabled
RegOpenKeyExW
EventRegister
EventUnregister
RegQueryValueExW
RegCloseKey

windowscodecs

WICCreateImagingFactory_Proxy

d3d10_1

D3D10CreateDevice1

dxgi

CreateDXGIFactory

Exports

Exports

MIL3DCalcBrushToIdealSampleSpace
MIL3DCalcProjected2DBounds
MILCreateFactory
MilChannel_AppendCommandData
MilChannel_BeginCommand
MilChannel_CommitChannel
MilChannel_EndCommand
MilChannel_FreeSyncCommandReplay
MilChannel_GetMarshalType
MilChannel_SendSyncCommand
MilChannel_SetNotificationWindow
MilChannel_SetReceiveBroadcastMessages
MilCommandTransport_AddRef
MilCommandTransport_Release
MilCompositionEngine_DeinitializePartitionManager
MilCompositionEngine_GetComposedEventId
MilCompositionEngine_GetFeedbackReader
MilCompositionEngine_InitializePartitionManager
MilCompositionEngine_UpdateSchedulerSettings
MilComposition_PeekNextMessage
MilComposition_SyncFlush
MilComposition_WaitForNextMessage
MilConnectionManager_NotifyHostEvent
MilConnection_ClearSfmEventOnPartition
MilConnection_CreateChannel
MilConnection_DestroyChannel
MilConnection_HandleSfmEventOnPartition
MilConnection_RecordUCE
MilCoreClientIsDwm
MilCrossThreadPacketTransport_Create
MilPlayer_Create
MilPlayer_Process
MilResource_CreateOrAddRefOnChannel
MilResource_DuplicateHandle
MilResource_ReleaseOnChannel
MilResource_SendCommand
MilResource_SendCommandBitmapSource
MilTransport_AddRef
MilTransport_Close
MilTransport_Create
MilTransport_CreateFromPacketTransport
MilTransport_CreateSurfaceManager
MilTransport_CreateTransportParameters
MilTransport_DisconnectTransport
MilTransport_InitializeConnectionManager
MilTransport_Open
MilTransport_PostPacket
MilTransport_Release
MilTransport_ShutDownConnectionManager
MilUtility_GetTileBrushMapping
MilVersionCheck
MilVisualTarget_AttachToHwnd
MilVisualTarget_DetachFromHwnd
SetMilPerfInstrumentationFlags

Sections

.text
Size: 668KB - Virtual size: 667KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 95KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 608KB - Virtual size: 608KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

63cccdd3ce6765df49c0252b9eb5a2b2

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

ntdll

kernel32

user32

gdi32

advapi32

windowscodecs

d3d10_1

dxgi

Exports

Exports

Sections

.text Size: 668KB - Virtual size: 667KB

.data Size: 95KB - Virtual size: 95KB

.rsrc Size: 608KB - Virtual size: 608KB

.reloc Size: 22KB - Virtual size: 21KB

.text
Size: 668KB - Virtual size: 667KB

.data
Size: 95KB - Virtual size: 95KB

.rsrc
Size: 608KB - Virtual size: 608KB

.reloc
Size: 22KB - Virtual size: 21KB