a5288f127787f453d31cf8137ecfa40f3d260c3ec17523581c2b064eeaf3c359

General

Target

a5288f127787f453d31cf8137ecfa40f3d260c3ec17523581c2b064eeaf3c359
Size

276KB
MD5

5d3e9700cc9f133f6f4fab2306d23ca8
SHA1

63664e702606dd4c5f45080082746d0ec6bc84c8
SHA256

a5288f127787f453d31cf8137ecfa40f3d260c3ec17523581c2b064eeaf3c359
SHA512

818fdf5dbf081744178011e28e57e578f4404dd464c03e7c3800cd83beb824116f61ee07abd8be5944fee1e926f5b2bf93f3fcec1d0a11905928c6c3e9466563
SSDEEP

6144:Z+MglbpqGEPuvKmHK4VD2Mf/HX0bEDcDKhTCRD:ZlQNHvp2ufX2EDlCRD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a5288f127787f453d31cf8137ecfa40f3d260c3ec17523581c2b064eeaf3c359

Files

a5288f127787f453d31cf8137ecfa40f3d260c3ec17523581c2b064eeaf3c359
.dll windows x86

092a7745da6e4edb47252ea17f36557c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

ddraw

DirectDrawCreateEx

user32

GetSysColorBrush

gdi32

SetMapMode

winspool.drv

ClosePrinter

advapi32

RegCloseKey

shell32

ShellExecuteA

shlwapi

PathStripPathA

ole32

CoTaskMemAlloc

oleaut32

SysFreeString

Exports

Exports

GPUabout
GPUclose
GPUconfigure
GPUcursor
GPUdisplayFlags
GPUdisplayText
GPUdmaChain
GPUfreeze
GPUgetMode
GPUgetScreenPic
GPUinit
GPUmakeSnapshot
GPUopen
GPUreadData
GPUreadDataMem
GPUreadStatus
GPUsetMode
GPUshowScreenPic
GPUshutdown
GPUtest
GPUupdateLace
GPUwriteData
GPUwriteDataMem
GPUwriteStatus
GSBenchmark
GSReplay
GSabout
GSclose
GSconfigure
GSfreeze
GSgetLastTag
GSgifSoftReset
GSgifTransfer1
GSgifTransfer2
GSgifTransfer3
GSinit
GSirqCallback
GSkeyEvent
GSmakeSnapshot
GSopen
GSreadFIFO
GSreadFIFO2
GSreset
GSsetBaseMem
GSsetFrameSkip
GSsetGameCRC
GSshutdown
GStest
GSvsync
GSwriteCSR
PS2EgetCpuPlatform
PS2EgetLibName
PS2EgetLibType
PS2EgetLibVersion2
PSEgetLibName
PSEgetLibType
PSEgetLibVersion

Sections

.text
Size: 265KB - Virtual size: 6.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

092a7745da6e4edb47252ea17f36557c

Headers

File Characteristics

Imports

kernel32

ddraw

user32

gdi32

winspool.drv

advapi32

shell32

shlwapi

ole32

oleaut32

Exports

Exports

Sections

.text Size: 265KB - Virtual size: 6.5MB

.rsrc Size: 10KB - Virtual size: 12KB

.reloc Size: 512B - Virtual size: 512B

.text
Size: 265KB - Virtual size: 6.5MB

.rsrc
Size: 10KB - Virtual size: 12KB

.reloc
Size: 512B - Virtual size: 512B