f0f205324b2f755565d143d985e14144f829dc791affbd99b14bf95ea509ab29

General

Target

f0f205324b2f755565d143d985e14144f829dc791affbd99b14bf95ea509ab29
Size

175KB
MD5

a1dd5b82b634f73b782241a3eece2bfb
SHA1

891f9ad1c44e531ad65851f6f20f376db651a119
SHA256

f0f205324b2f755565d143d985e14144f829dc791affbd99b14bf95ea509ab29
SHA512

186d3695652851a151c52e36b48be0d35e252cb2125e4ef4f79d510b0b1338edda2aed6868e5ad9fbaf5ec1c449dacf6ad3dad9e46f5d20beeb763d113243b6d
SSDEEP

3072:gSh3buKt5PpuymSQijefTVhFygqVzKaH6+UctKYJRVsqFCLtXAh:blbuQ5mNpfxhFygqVzKU6tcoksECLNA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f0f205324b2f755565d143d985e14144f829dc791affbd99b14bf95ea509ab29

Files

f0f205324b2f755565d143d985e14144f829dc791affbd99b14bf95ea509ab29
.dll windows x86

4eb2af8fd8ababd11cb797971da8e816

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

SetMenu

gdi32

GetStockObject

comdlg32

GetSaveFileNameA

shell32

ShellExecuteA

ole32

CoInitializeEx

oleaut32

SysAllocStringLen

w32pthreads.v4

sem_destroy

msvcp90

?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ

msvcr90

_itoa

Exports

Exports

GSBenchmark
GSReplay
GSabout
GSclose
GSconfigure
GSfreeze
GSgetLastTag
GSgifSoftReset
GSgifTransfer
GSgifTransfer1
GSgifTransfer2
GSgifTransfer3
GSinit
GSirqCallback
GSkeyEvent
GSmakeSnapshot
GSopen
GSopen2
GSreadFIFO
GSreadFIFO2
GSreset
GSsetBaseMem
GSsetExclusive
GSsetFrameLimit
GSsetFrameSkip
GSsetGameCRC
GSsetSettingsDir
GSsetVsync
GSsetupRecording
GSshutdown
GStest
GSvsync
GSwriteCSR
PS2EgetCpuPlatform
PS2EgetLibName
PS2EgetLibType
PS2EgetLibVersion2
PS2EsetEmuVersion
_GSgetTitleInfo@4

Sections

.text
Size: 166KB - Virtual size: 6.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

4eb2af8fd8ababd11cb797971da8e816

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

shell32

ole32

oleaut32

w32pthreads.v4

msvcp90

msvcr90

Exports

Exports

Sections

.text Size: 166KB - Virtual size: 6.2MB

.rsrc Size: 7KB - Virtual size: 8KB

.reloc Size: 512B - Virtual size: 512B

.text
Size: 166KB - Virtual size: 6.2MB

.rsrc
Size: 7KB - Virtual size: 8KB

.reloc
Size: 512B - Virtual size: 512B