Galaxy64[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

Galaxy64.dll
Size

13.1MB
MD5

f82778db40127943e0a418c44ccb9bea
SHA1

cf8a63dc9dacb951c05318851f2a0972094d5adc
SHA256

9e16d5cc42623b85644146933dbd791729905b628bd52f853af750551bb03626
SHA512

56dcbbbeda0b4d072eeb5557b03762164c5336d694c5ea4c3ddf7f1d2e569d22125d74af52fe16a4de1de79cdcda01a10c1e815700598a5cdfed432abdb10542
SSDEEP

98304:ocOugntzL7OxXz1t/BzdksF9yhGjn+NRuRK0RoOsNzqzq7QVwW:JtMtzfoXzLtF9yeoRubI

Score

1^/10

Malware Config

Signatures

Files

Galaxy64.dll
.dll windows x64

9e6483bffdd94e820fdb66f85d6c4724

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ws2_32

htons
inet_addr
ntohl
htonl
ntohs
WSACleanup
bind
closesocket
ioctlsocket
getsockname
getpeername
inet_ntoa
recvfrom
sendto
setsockopt
socket
gethostbyname
gethostname
__WSAFDIsSet
WSASetLastError
WSAGetLastError
WSARecv
WSASend
WSASocketW
inet_pton
WSAAddressToStringW
WSAStringToAddressW
getaddrinfo
WSAIoctl
shutdown
send
select
freeaddrinfo
getsockopt
recv
listen
connect
accept
WSAStartup

kernel32

TlsFree
GetModuleFileNameA
GetModuleHandleA
CreateSemaphoreA
GetTickCount
ReleaseSemaphore
DuplicateHandle
GetProcAddress
GetCurrentProcess
GetProcessHeap
HeapAlloc
HeapFree
QueryPerformanceCounter
QueryPerformanceFrequency
MultiByteToWideChar
WideCharToMultiByte
InitializeCriticalSection
DeleteCriticalSection
SetThreadPriority
Sleep
LocalFree
FormatMessageA
GetSystemTimeAsFileTime
GetEnvironmentVariableW
SetCurrentDirectoryW
GetCurrentDirectoryW
CreateDirectoryW
CreateFileW
DeleteFileW
FindClose
FindFirstFileW
FindNextFileW
GetDiskFreeSpaceExW
GetFileAttributesW
GetFileAttributesExW
GetFileInformationByHandle
GetFileTime
GetFullPathNameW
RemoveDirectoryW
SetEndOfFile
SetFileAttributesW
TlsAlloc
SetFileTime
DeviceIoControl
GetWindowsDirectoryW
CreateDirectoryExW
CopyFileW
MoveFileExW
AreFileApisANSI
FreeLibrary
LoadLibraryA
GetStringTypeExW
LCMapStringW
LCMapStringA
GetUserDefaultLCID
GetStringTypeExA
OpenEventA
GetSystemInfo
WaitForMultipleObjectsEx
GetCurrentProcessId
ResetEvent
SetWaitableTimer
ResumeThread
TlsGetValue
TlsSetValue
GetLogicalProcessorInformation
CreateWaitableTimerA
SystemTimeToFileTime
LeaveCriticalSection
FlushConsoleInputBuffer
GlobalMemoryStatus
LoadLibraryW
GetSystemTime
GetFileSizeEx
CreateFileA
ExpandEnvironmentStringsA
GetSystemDirectoryA
InitializeCriticalSectionEx
GetTickCount64
SetConsoleTextAttribute
QueryFullProcessImageNameA
OpenProcess
CreateProcessA
GetExitCodeProcess
SleepEx
VerifyVersionInfoA
WaitForMultipleObjects
TerminateThread
QueueUserAPC
WaitForSingleObject
GetQueuedCompletionStatus
CreateIoCompletionPort
VerSetConditionMask
OutputDebugStringW
OutputDebugStringA
HeapSize
WriteConsoleW
SetStdHandle
SetEnvironmentVariableW
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
EnterCriticalSection
PostQueuedCompletionStatus
SetConsoleMode
GetLastError
GetCurrentThreadId
SetEvent
WaitForSingleObjectEx
CloseHandle
CreateEventA
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetNumberOfConsoleInputEvents
PeekConsoleInputA
ReadConsoleInputA
SetFilePointerEx
FormatMessageW
EncodePointer
DecodePointer
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
GetModuleHandleW
CompareStringW
GetLocaleInfoW
GetStringTypeW
GetCPInfo
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
TerminateProcess
RtlPcToFileHeader
RaiseException
InterlockedPushEntrySList
InterlockedFlushSList
RtlUnwindEx
LoadLibraryExW
SetConsoleCtrlHandler
GetFullPathNameA
ReadFile
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
HeapReAlloc
ExitProcess
GetModuleFileNameW
GetCurrentThread
GetACP
GetStdHandle
GetFileType
GetDriveTypeW
GetDateFormatW
GetTimeFormatW
IsValidLocale
EnumSystemLocalesW
GetConsoleMode
ReadConsoleW
FlushFileBuffers
WriteFile
GetConsoleCP
GetTimeZoneInformation
FindFirstFileExA
FindFirstFileExW
FindNextFileA
IsValidCodePage
GetOEMCP

user32

GetUserObjectInformationW
GetProcessWindowStation
GetDC
LoadStringW
MessageBoxW
ReleaseDC
LoadStringA
WaitForInputIdle

bcrypt

BCryptGetProperty
BCryptCreateHash
BCryptHashData
BCryptFinishHash
BCryptDestroyHash
BCryptGenerateSymmetricKey
BCryptEncrypt
BCryptDecrypt
BCryptGenRandom
BCryptDestroySecret
BCryptSecretAgreement
BCryptDeriveKey
BCryptSignHash
BCryptVerifySignature
BCryptOpenAlgorithmProvider
BCryptCloseAlgorithmProvider
BCryptGenerateKeyPair
BCryptExportKey
BCryptImportKeyPair
BCryptFinalizeKeyPair
BCryptDestroyKey

crypt32

CertFreeCertificateChain
CertFindCertificateInStore
CertCloseStore
CertOpenStore
CertGetCertificateChain
CertFreeCertificateChainEngine
CertFreeCertificateContext
CryptStringToBinaryA
CertAddCertificateContextToStore
CertGetNameStringA
CryptQueryObject
CertCreateCertificateChainEngine

iphlpapi

IcmpSendEcho
IcmpCreateFile

gdi32

GetDeviceCaps
GetDIBits
GetObjectW
CreateCompatibleBitmap
DeleteObject

shell32

SHGetFolderPathW

advapi32

QueryServiceStatus
ControlService
OpenSCManagerA
OpenServiceA
StartServiceA
CryptAcquireContextA
CryptReleaseContext
ReportEventW
RegisterEventSourceW
DeregisterEventSource
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGenRandom
CryptGetHashParam
CloseServiceHandle

mswsock

AcceptEx
GetAcceptExSockaddrs

Exports

Exports

?Apps@api@galaxy@@YAPEAVIApps@12@XZ
?Chat@api@galaxy@@YAPEAVIChat@12@XZ
?CustomNetworking@api@galaxy@@YAPEAVICustomNetworking@12@XZ
?Friends@api@galaxy@@YAPEAVIFriends@12@XZ
?GameServerListenerRegistrar@api@galaxy@@YAPEAVIListenerRegistrar@12@XZ
?GameServerLogger@api@galaxy@@YAPEAVILogger@12@XZ
?GameServerMatchmaking@api@galaxy@@YAPEAVIMatchmaking@12@XZ
?GameServerNetworking@api@galaxy@@YAPEAVINetworking@12@XZ
?GameServerUser@api@galaxy@@YAPEAVIUser@12@XZ
?GameServerUtils@api@galaxy@@YAPEAVIUtils@12@XZ
?GetError@api@galaxy@@YAPEBVIError@12@XZ
?Init@api@galaxy@@YAXAEBUInitOptions@12@@Z
?InitGameServer@api@galaxy@@YAXAEBUInitOptions@12@@Z
?ListenerRegistrar@api@galaxy@@YAPEAVIListenerRegistrar@12@XZ
?Logger@api@galaxy@@YAPEAVILogger@12@XZ
?Matchmaking@api@galaxy@@YAPEAVIMatchmaking@12@XZ
?Networking@api@galaxy@@YAPEAVINetworking@12@XZ
?ProcessData@api@galaxy@@YAXXZ
?ProcessGameServerData@api@galaxy@@YAXXZ
?ServerNetworking@api@galaxy@@YAPEAVINetworking@12@XZ
?Shutdown@api@galaxy@@YAXXZ
?ShutdownGameServer@api@galaxy@@YAXXZ
?Stats@api@galaxy@@YAPEAVIStats@12@XZ
?Storage@api@galaxy@@YAPEAVIStorage@12@XZ
?User@api@galaxy@@YAPEAVIUser@12@XZ
?Utils@api@galaxy@@YAPEAVIUtils@12@XZ
load

Sections

.text
Size: 8.4MB - Virtual size: 8.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 688KB - Virtual size: 753KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 515KB - Virtual size: 515KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.00cfg
Size: 512B - Virtual size: 283B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 97KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9e6483bffdd94e820fdb66f85d6c4724

Headers

DLL Characteristics

File Characteristics

Imports

ws2_32

kernel32

user32

bcrypt

crypt32

iphlpapi

gdi32

shell32

advapi32

mswsock

Exports

Exports

Sections

.text Size: 8.4MB - Virtual size: 8.4MB

.rdata Size: 3.4MB - Virtual size: 3.4MB

.data Size: 688KB - Virtual size: 753KB

.pdata Size: 515KB - Virtual size: 515KB

.idata Size: 13KB - Virtual size: 12KB

.tls Size: 4KB - Virtual size: 4KB

.gfids Size: 3KB - Virtual size: 2KB

.00cfg Size: 512B - Virtual size: 283B

_RDATA Size: 38KB - Virtual size: 38KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 97KB - Virtual size: 96KB

.text
Size: 8.4MB - Virtual size: 8.4MB

.rdata
Size: 3.4MB - Virtual size: 3.4MB

.data
Size: 688KB - Virtual size: 753KB

.pdata
Size: 515KB - Virtual size: 515KB

.idata
Size: 13KB - Virtual size: 12KB

.tls
Size: 4KB - Virtual size: 4KB

.gfids
Size: 3KB - Virtual size: 2KB

.00cfg
Size: 512B - Virtual size: 283B

_RDATA
Size: 38KB - Virtual size: 38KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 97KB - Virtual size: 96KB