7807cd696bb5dd7c0841ab1b7ffd9704855defd60e704c1087e60cb7efed5fac

Sharing

Copy URL Twitter E-mail

General

Target

7807cd696bb5dd7c0841ab1b7ffd9704855defd60e704c1087e60cb7efed5fac
Size

5.6MB
MD5

99650cb53931c6a5920b0b85978e3ccf
SHA1

673f29f14ccebe17c2bc9c3105762adeb69682d8
SHA256

7807cd696bb5dd7c0841ab1b7ffd9704855defd60e704c1087e60cb7efed5fac
SHA512

805ddf9f3a7f93abdd56daecafd03a7690530d72086333c8c791beab640b0f819f0a341e7044ed2b79f41f09cca699c4473d9f57a889f72c9bba512b1557f55c
SSDEEP

98304:Jh9INM1LNEmIm+RFOH5U3IxehhwwiE269KA+raX:XKNMfYPSZU3Ix+eweI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7807cd696bb5dd7c0841ab1b7ffd9704855defd60e704c1087e60cb7efed5fac

Files

7807cd696bb5dd7c0841ab1b7ffd9704855defd60e704c1087e60cb7efed5fac
.exe windows x86

3bdf569299bd2eb46257f031a0730cc0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

opengl32

glMaterialfv
glVertex3fv
glDisable
glEnable
glLineStipple
glLineWidth
glEnd
glTexGeni
glPointSize
glMaterialf
glPopMatrix
glViewport
glEnableClientState
glStencilOp
glClear
glPolygonOffset
glTexEnvf
glStencilMask
glPopAttrib
glPolygonMode
glGetFloatv
glGetIntegerv
glTexSubImage2D
glGetTexImage
glTexImage2D
glDeleteTextures
glCopyTexSubImage2D
glGenTextures
glPushAttrib
glLightf
glGetError
glDrawBuffer
glLightModeli
glGetString
glDepthFunc
glPixelStorei
glShadeModel
glNormalPointer
wglMakeCurrent
glPushMatrix
glLightfv
glMultMatrixf
glClearDepth
glRectf
glDrawElements
glTexEnvi
glColorMaterial
glColorPointer
glColor4ub
glFlush
glFogi
glIsEnabled
glVertex2f
glTranslatef
glTexParameterf
wglDeleteContext
glDrawArrays
glVertex2i
glLightModelfv
glClearColor
glClipPlane
glTexCoordPointer
glAlphaFunc
glReadBuffer
glHint
glTexParameteri
wglGetProcAddress
glLoadIdentity
glColorMask
wglCreateContext
glReadPixels
glBlendFunc
glStencilFunc
glFrontFace
glMatrixMode
glDisableClientState
glTexCoord2f
glFogfv
glFogf
glScissor
glLoadMatrixf
glDepthMask
glCullFace
glVertex3f
glVertexPointer
glBindTexture
glBegin

ws2_32

WSACleanup
inet_addr
WSAStartup
bind
closesocket
gethostbyname
WSASetLastError
recvfrom
htonl
htons
ntohl
accept
listen
getprotobynumber
WSAIoctl
getaddrinfo
getsockname
ntohs
connect
getservbyname
getsockopt
freeaddrinfo
WSASend
WSARecv
ioctlsocket
send
socket
recv
sendto
setsockopt
gethostname
WSAGetOverlappedResult
select
WSAGetLastError

winmm

waveOutWrite
waveOutUnprepareHeader
waveOutPrepareHeader
waveOutClose
waveOutOpen
waveOutReset

kernel32

FindFirstFileW
FindNextFileW
FindClose
GetFileAttributesW
MoveFileW
CreateDirectoryW
DeleteFileW
GetModuleHandleW
GetCommandLineW
GetModuleFileNameW
SetCurrentDirectoryW
LocalFree
CreateProcessW
WriteFile
CreateFileW
CloseHandle
OutputDebugStringA
QueryPerformanceCounter
QueryPerformanceFrequency
Sleep
GetTickCount
GetModuleHandleA
GetProcAddress
LoadLibraryA
SetEvent
SetThreadPriority
ResumeThread
GetVersionExA
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetModuleFileNameA
GetFileType
ReadConsoleW
GetTimeZoneInformation
SetFilePointerEx
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
FindFirstFileExW
GetCurrentDirectoryW
SetEnvironmentVariableW
GetDriveTypeW
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
CreateThread
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
SetLastError
RaiseException
RtlUnwind
GetStartupInfoW
IsDebuggerPresent
GetCommandLineA
GetDateFormatW
GetTimeFormatW
CompareStringW
InitializeCriticalSection
LCMapStringW
GetLocaleInfoW
IsValidLocale
InitializeSListHead
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCPInfo
GetUserDefaultLCID
LCMapStringEx
DecodePointer
EncodePointer
InitializeCriticalSectionEx
SleepConditionVariableSRW
WakeAllConditionVariable
WakeConditionVariable
InitializeConditionVariable
TryAcquireSRWLockExclusive
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
InitializeSRWLock
CreateIoCompletionPort
CreateSemaphoreW
PostQueuedCompletionStatus
GetQueuedCompletionStatus
ReleaseSemaphore
ResetEvent
CreateEventW
InitializeCriticalSectionAndSpinCount
GetFileSizeEx
ExitProcess
GlobalUnlock
GlobalMemoryStatusEx
GlobalLock
GlobalAlloc
SetConsoleTitleW
SetConsoleCursorPosition
GetNumberOfConsoleInputEvents
ReadConsoleInputW
GetConsoleMode
SetConsoleMode
GetStdHandle
SetConsoleScreenBufferSize
SetConsoleDisplayMode
SetConsoleCtrlHandler
VerifyVersionInfoW
VerSetConditionMask
GetVersionExW
GetCurrentThread
SetThreadAffinityMask
FlushFileBuffers
MapViewOfFile
CreateFileMappingW
FormatMessageA
GetSystemTime
GetSystemTimeAsFileTime
WideCharToMultiByte
FreeLibrary
SystemTimeToFileTime
GetProcessHeap
GetCurrentProcessId
GetFileSize
LockFileEx
UnlockFile
HeapDestroy
HeapCompact
HeapAlloc
LoadLibraryW
GetSystemInfo
HeapReAlloc
DeleteFileA
EnumSystemLocalesW
GetConsoleOutputCP
SetStdHandle
IsValidCodePage
GetACP
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
WriteConsoleW
LoadLibraryExA
DuplicateHandle
GetExitCodeProcess
MoveFileExW
GetStringTypeW
GetFullPathNameA
AreFileApisANSI
ReadFile
TryEnterCriticalSection
HeapCreate
HeapFree
GetFullPathNameW
GetDiskFreeSpaceW
LockFile
SetFilePointer
CreatePipe
SetEndOfFile
UnlockFileEx
GetTempPathW
CreateMutexW
WaitForSingleObject
GetCurrentThreadId
UnmapViewOfFile
HeapValidate
HeapSize
MultiByteToWideChar
GetTempPathA
FormatMessageW
GetDiskFreeSpaceA
GetLastError
GetFileAttributesA
GetFileAttributesExW
OutputDebugStringW
FlushViewOfFile
CreateFileA
WaitForSingleObjectEx

user32

DefWindowProcW
GetMessagePos
MapVirtualKeyW
SendMessageTimeoutW
GetFocus
GetClipboardData
SetWindowPos
SetActiveWindow
CreateWindowExW
ToAsciiEx
SetClipboardData
EmptyClipboard
GetDC
OpenClipboard
GetSystemMetrics
DestroyWindow
CreateWindowExA
RegisterClassA
DefWindowProcA
MessageBoxA
GetWindowRect
SendMessageW
GetWindowPlacement
ShowWindow
MoveWindow
FlashWindowEx
GetClientRect
LoadImageW
ClientToScreen
SetCursorPos
UnregisterClassW
RegisterClassExW
DestroyCursor
GetKeyboardState
GetActiveWindow
ChangeDisplaySettingsW
GetCapture
DispatchMessageW
GetCursorInfo
CreateIconIndirect
PeekMessageW
SetWindowPlacement
GetDoubleClickTime
GetKeyboardLayout
AdjustWindowRect
CloseClipboard
TranslateMessage
LoadCursorW
SetCapture
SetCursor
EndPaint
BeginPaint
GetCursorPos
ReleaseDC
ShowCursor
SetForegroundWindow
ReleaseCapture
UpdateWindow
EnumDisplaySettingsW
PostQuitMessage
SetWindowLongW

shell32

SHFileOperationW
CommandLineToArgvW
ShellExecuteW

ole32

CoCreateInstance
CoInitialize
CoUninitialize

imm32

ImmReleaseContext
ImmSetCompositionWindow
ImmAssociateContextEx
ImmNotifyIME
ImmGetContext

dinput8

DirectInput8Create

gdi32

GetPixelFormat
SwapBuffers
ChoosePixelFormat
CreateCompatibleBitmap
SelectObject
SetDeviceGammaRamp
CreateCompatibleDC
SetPixel
StretchDIBits
GetDeviceGammaRamp
DeleteDC
DeleteObject
SetPixelFormat
DescribePixelFormat

advapi32

RegOpenKeyExW
RegCloseKey
RegQueryValueExW

Exports

Exports

create_duel
end_duel
get_log_message
get_message
ikpMP3Init
new_card
new_tag_card
preload_script
process
query_card
query_field_card
query_field_count
query_field_info
set_card_reader
set_message_handler
set_player_info
set_responseb
set_responsei
set_script_reader
start_duel

Sections

.text
Size: 4.7MB - Virtual size: 4.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 579KB - Virtual size: 578KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 524KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 178KB - Virtual size: 177KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 156KB - Virtual size: 155KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3bdf569299bd2eb46257f031a0730cc0

Headers

DLL Characteristics

File Characteristics

Imports

opengl32

ws2_32

winmm

kernel32

user32

shell32

ole32

imm32

dinput8

gdi32

advapi32

Exports

Exports

Sections

.text Size: 4.7MB - Virtual size: 4.7MB

.rdata Size: 579KB - Virtual size: 578KB

.data Size: 40KB - Virtual size: 524KB

.rsrc Size: 178KB - Virtual size: 177KB

.reloc Size: 156KB - Virtual size: 155KB

.text
Size: 4.7MB - Virtual size: 4.7MB

.rdata
Size: 579KB - Virtual size: 578KB

.data
Size: 40KB - Virtual size: 524KB

.rsrc
Size: 178KB - Virtual size: 177KB

.reloc
Size: 156KB - Virtual size: 155KB