__GetExceptDLLinfo
___CPPdebugHook
Static task
static1
1 signatures
General
-
Target
TronDS1005.zip
-
Size
263KB
-
MD5
5e005c6899ea0479af814f6788c8c2ac
-
SHA1
ca0a608ead3f03447a7873308eb59dee5c1c7c73
-
SHA256
d15809b303bfe241c63a3150699e8198aff59d52be4cc8b9275a10bfe4f39b1a
-
SHA512
59ba744638c9f8e593dfb773eeefacbeaecf9f1167d045219072a94f7b42257126fc0a8f2a11c68065abd7ca29aece56c7fdf01f2d701f1b402fb1ae28969c70
-
SSDEEP
6144:Tm9dGa7WIlYxQ03BHjAyc0Q577CWwoz17jV4dShYLdtBEifv5AU/n:TmD2NHcr5SWDzpjVC+YLDBzHSU/
Score
3/10
Malware Config
Signatures
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/TronDS.exe unpack001/TronDSGUI.dll
Files
-
TronDS1005.zip.zip
-
TronDS.exe.exe windows x86
76bf2436e2666d7f6ea3249e832901ae
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
CloseHandle
CreateDirectoryA
CreateFileA
DeleteFileA
DeleteFileW
EnterCriticalSection
ExitProcess
FindClose
FindFirstFileA
FindNextFileA
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCurrentThreadId
GetDateFormatA
GetEnvironmentStrings
GetFileAttributesA
GetFileSize
GetFileType
GetLastError
GetLocalTime
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetStartupInfoA
GetStdHandle
GetStringTypeW
GetTimeZoneInformation
GetVersion
GetVersionExA
GlobalAlloc
GlobalFree
GlobalMemoryStatus
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
LocalAlloc
LocalFree
MultiByteToWideChar
RaiseException
ReadFile
RtlUnwind
SetConsoleCtrlHandler
SetEndOfFile
SetFilePointer
SetHandleCount
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualQuery
WideCharToMultiByte
WriteFile
lstrcatA
lstrcmpA
lstrcmpiA
lstrcpyA
lstrcpynA
lstrlenA
wsock32
WSACleanup
WSAStartup
closesocket
connect
gethostbyname
htons
recv
send
shutdown
socket
comctl32
InitCommonControlsEx
comdlg32
GetOpenFileNameA
gdi32
ChoosePixelFormat
CreateCompatibleDC
CreateDIBSection
DeleteDC
DeleteObject
GetStockObject
SelectObject
SetPixelFormat
StretchDIBits
opengl32
glAlphaFunc
glBindTexture
glClear
glClearColor
glCullFace
glDeleteTextures
glDisable
glDisableClientState
glDrawArrays
glEnable
glEnableClientState
glFogi
glGenTextures
glGetString
glHint
glLoadIdentity
glLogicOp
glMatrixMode
glReadBuffer
glReadPixels
glTexEnvf
glTexEnvfv
glTexImage2D
glTexParameteri
glViewport
wglCreateContext
wglGetProcAddress
wglMakeCurrent
user32
BeginPaint
CharLowerBuffA
CreateWindowExA
DefWindowProcA
DestroyWindow
DispatchMessageA
EndPaint
EnumThreadWindows
GetAsyncKeyState
GetClientRect
GetDC
GetMessageA
GetWindowLongA
GetWindowRect
LoadCursorA
LoadIconA
MessageBoxA
PeekMessageA
PostMessageA
RegisterClassA
ReleaseDC
SetForegroundWindow
SetWindowLongA
SetWindowPos
ShowWindow
UnregisterClassA
wsprintfA
ole32
OleInitialize
Exports
Exports
Sections
.text Size: 336KB - Virtual size: 336KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 328KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 85KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
TronDSGUI.dll.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorDllMain
Sections
.text Size: 83KB - Virtual size: 83KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
readme.txt