__GetExceptDLLinfo
___CPPdebugHook
Static task
static1
1 signatures
General
-
Target
TronDS1004 (1).zip
-
Size
266KB
-
MD5
674ce00c0f4d0c99000a2748f3b337c0
-
SHA1
80eac3d7648d8392dfd0b80243c4473469d8921c
-
SHA256
0bd194b14dedafe4e46bb3b587928321df6d7d90bb837173655f475b68777a81
-
SHA512
3df60290f2713bbf9484ae48ca6a13d6ce9abe13e3bd313d096daf3bcc7a979764078ace1e507647688eb92ca95203d6f25b37006ae3647d336e23000e81bf3e
-
SSDEEP
6144:ElbJoP6VGaZ70HBh4W3KS/i0k9PnpTLCLYsFmX52yXfol:EtyCVDwHn4W3KS6B9PnpTWEsFwhwl
Score
3/10
Malware Config
Signatures
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/TronDS.exe unpack001/TronDSGUI.dll
Files
-
TronDS1004 (1).zip.zip
-
TronDS.exe.exe windows x86
00e3f11741e9778a967bb69497273f6e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
CloseHandle
CreateDirectoryA
CreateFileA
DeleteFileA
DeleteFileW
EnterCriticalSection
ExitProcess
FindClose
FindFirstFileA
FindNextFileA
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCurrentThreadId
GetDateFormatA
GetEnvironmentStrings
GetFileAttributesA
GetFileSize
GetFileType
GetLastError
GetLocalTime
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetStartupInfoA
GetStdHandle
GetStringTypeW
GetVersion
GetVersionExA
GlobalAlloc
GlobalFree
GlobalMemoryStatus
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
LocalAlloc
LocalFree
MultiByteToWideChar
RaiseException
ReadFile
RtlUnwind
SetConsoleCtrlHandler
SetEndOfFile
SetFilePointer
SetHandleCount
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualQuery
WideCharToMultiByte
WriteFile
lstrcatA
lstrcmpA
lstrcmpiA
lstrcpyA
lstrcpynA
lstrlenA
comctl32
InitCommonControlsEx
comdlg32
GetOpenFileNameA
gdi32
ChoosePixelFormat
CreateCompatibleDC
CreateDIBSection
DeleteDC
DeleteObject
GetStockObject
SelectObject
SetPixelFormat
StretchDIBits
opengl32
glAlphaFunc
glBindTexture
glClear
glClearColor
glCullFace
glDeleteTextures
glDisable
glDisableClientState
glDrawArrays
glEnable
glEnableClientState
glFogi
glGenTextures
glGetString
glHint
glLoadIdentity
glLogicOp
glMatrixMode
glReadBuffer
glReadPixels
glTexEnvf
glTexEnvfv
glTexImage2D
glTexParameteri
glViewport
wglCreateContext
wglGetProcAddress
wglMakeCurrent
user32
BeginPaint
CharLowerBuffA
CreateWindowExA
DefWindowProcA
DestroyWindow
DispatchMessageA
EndPaint
EnumThreadWindows
GetAsyncKeyState
GetClientRect
GetDC
GetMessageA
GetWindowLongA
GetWindowRect
LoadCursorA
LoadIconA
MessageBoxA
PeekMessageA
PostMessageA
RegisterClassA
ReleaseDC
SetForegroundWindow
SetWindowLongA
SetWindowPos
ShowWindow
UnregisterClassA
wsprintfA
ole32
OleInitialize
Exports
Exports
Sections
.text Size: 324KB - Virtual size: 328KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 27KB - Virtual size: 328KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 85KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
TronDSGUI.dll.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorDllMain
Sections
.text Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
readme.txt