Static task
static1
General
-
Target
dx9injector.exe
-
Size
957KB
-
MD5
37af9a96006edf658177ec65d9df5fff
-
SHA1
44ce095d32a4360fe48a87c64b46e838845149a5
-
SHA256
58a00bc746d1d8d839a4d40a68e7675d9cbe3859a6abb3eb2cdfff2209a7a192
-
SHA512
abf8e96b8226bf3dc03d8c3041e9b044006cb6ca0f5fbd678ea2b34bb026eadab56754a72de741f325a19016e678eadefd2de3b68b2b9428e1699b77fc01f0eb
-
SSDEEP
24576:U81rfrOBUbYgmDwHX0mQF3HGyNjTjmUTdvh:9rfrOBUbY9DQXUvTdvh
Malware Config
Signatures
Files
-
dx9injector.exe.exe windows x86
5b796d0f2f0f44da2687c092a9d33515
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenProcess
SystemTimeToTzSpecificLocalTime
GetModuleHandleA
GetCurrentDirectoryA
Module32First
Module32Next
FileTimeToSystemTime
CreateThread
ExitThread
VirtualQuery
CreateDirectoryA
CreateRemoteThread
GetConsoleWindow
VirtualAllocEx
GetProcAddress
CloseHandle
Process32Next
LoadLibraryA
Sleep
GetDriveTypeW
CreateToolhelp32Snapshot
GetStdHandle
SetConsoleTitleA
SetConsoleTextAttribute
WriteProcessMemory
Process32First
CreateFileA
VerifyVersionInfoA
VerSetConditionMask
WaitForMultipleObjects
PeekNamedPipe
MoveFileExA
GetEnvironmentVariableA
GetSystemDirectoryA
SleepEx
GetTickCount
WriteConsoleW
HeapSize
SetStdHandle
GetProcessHeap
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
HeapReAlloc
GetTimeZoneInformation
ReadFile
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
CreateProcessW
GetExitCodeProcess
WaitForSingleObject
ReadConsoleW
ReadConsoleInputW
SetConsoleMode
HeapFree
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
HeapAlloc
GetFileType
GetLastError
FormatMessageA
FormatMessageW
WideCharToMultiByte
LocalFree
FindClose
FindNextFileW
GetModuleHandleW
GetCurrentDirectoryW
CreateFileW
DeleteFileW
GetFileAttributesW
GetFileAttributesExW
GetFileInformationByHandle
GetFullPathNameW
RemoveDirectoryW
SetEndOfFile
SetFilePointerEx
DeviceIoControl
AreFileApisANSI
MultiByteToWideChar
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
TryEnterCriticalSection
DeleteCriticalSection
GetCurrentThreadId
EncodePointer
DecodePointer
LCMapStringEx
QueryPerformanceCounter
QueryPerformanceFrequency
GetSystemTimeAsFileTime
GetLocaleInfoEx
GetStringTypeW
CompareStringEx
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
IsDebuggerPresent
GetStartupInfoW
GetCurrentProcessId
InitializeSListHead
RtlUnwind
RaiseException
SetLastError
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetConsoleCP
GetModuleFileNameW
WriteFile
GetCommandLineA
GetCommandLineW
GetFileSizeEx
FreeLibraryAndExitThread
user32
MessageBoxA
FindWindowA
d3d9
Direct3DCreate9
iphlpapi
GetAdaptersInfo
wininet
DeleteUrlCacheEntry
urlmon
URLDownloadToFileA
crypt32
CertFreeCertificateChain
CertGetCertificateChain
CertFreeCertificateChainEngine
CertCreateCertificateChainEngine
CryptQueryObject
CertGetNameStringA
CertFindExtension
CertAddCertificateContextToStore
CryptDecodeObjectEx
PFXImportCertStore
CryptStringToBinaryA
CertFreeCertificateContext
CertFindCertificateInStore
CertEnumCertificatesInStore
CertCloseStore
CertOpenStore
ws2_32
WSAEventSelect
WSAEnumNetworkEvents
WSACreateEvent
WSACloseEvent
listen
ntohl
recvfrom
WSAStartup
WSAIoctl
setsockopt
ntohs
htons
getsockopt
getsockname
getpeername
connect
bind
WSASetLastError
select
__WSAFDIsSet
WSAGetLastError
inet_pton
socket
send
recv
closesocket
accept
gethostname
freeaddrinfo
sendto
htonl
getaddrinfo
ioctlsocket
WSACleanup
wldap32
ord27
ord26
ord22
ord41
ord32
ord45
ord60
ord211
ord46
ord143
ord33
ord35
ord79
ord30
ord200
ord301
ord50
advapi32
CryptAcquireContextA
CryptReleaseContext
CryptGetHashParam
CryptGenRandom
CryptCreateHash
CryptHashData
CryptDestroyHash
CryptDestroyKey
CryptImportKey
CryptEncrypt
Sections
.text Size: 751KB - Virtual size: 751KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 159KB - Virtual size: 159KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ