59e31f6fd6abd386bd231c4c25355729f7b8f942b783545fb650ec4ce6513c47

General

Target

59e31f6fd6abd386bd231c4c25355729f7b8f942b783545fb650ec4ce6513c47
Size

276KB
MD5

a8d12ef0398b655d93232fa25ade2810
SHA1

d9f71ab283a96c37de45c03953eba346eac186b4
SHA256

59e31f6fd6abd386bd231c4c25355729f7b8f942b783545fb650ec4ce6513c47
SHA512

a9d464dae43ff053b6e4eba3d1b9de3f7b7f38fdf1991479592e0289ad2651726cecd8fd9a5d690118ff8270a35ad563ba0687e86b48e017078402bb71e9ba7e
SSDEEP

6144:b+MglbpqGEPuvKmHK4VD2Mf/HX0bEDcDKhTCRD:blQNHvp2ufX2EDlCRD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
59e31f6fd6abd386bd231c4c25355729f7b8f942b783545fb650ec4ce6513c47

Files

59e31f6fd6abd386bd231c4c25355729f7b8f942b783545fb650ec4ce6513c47
.dll windows x86

092a7745da6e4edb47252ea17f36557c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

ddraw

DirectDrawCreateEx

user32

GetSysColorBrush

gdi32

SetMapMode

winspool.drv

ClosePrinter

advapi32

RegCloseKey

shell32

ShellExecuteA

shlwapi

PathStripPathA

ole32

CoTaskMemAlloc

oleaut32

SysFreeString

Exports

Exports

GPUabout
GPUclose
GPUconfigure
GPUcursor
GPUdisplayFlags
GPUdisplayText
GPUdmaChain
GPUfreeze
GPUgetMode
GPUgetScreenPic
GPUinit
GPUmakeSnapshot
GPUopen
GPUreadData
GPUreadDataMem
GPUreadStatus
GPUsetMode
GPUshowScreenPic
GPUshutdown
GPUtest
GPUupdateLace
GPUwriteData
GPUwriteDataMem
GPUwriteStatus
GSBenchmark
GSReplay
GSabout
GSclose
GSconfigure
GSfreeze
GSgetLastTag
GSgifSoftReset
GSgifTransfer1
GSgifTransfer2
GSgifTransfer3
GSinit
GSirqCallback
GSkeyEvent
GSmakeSnapshot
GSopen
GSreadFIFO
GSreadFIFO2
GSreset
GSsetBaseMem
GSsetFrameSkip
GSsetGameCRC
GSshutdown
GStest
GSvsync
GSwriteCSR
PS2EgetCpuPlatform
PS2EgetLibName
PS2EgetLibType
PS2EgetLibVersion2
PSEgetLibName
PSEgetLibType
PSEgetLibVersion

Sections

.text
Size: 265KB - Virtual size: 6.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

092a7745da6e4edb47252ea17f36557c

Headers

File Characteristics

Imports

kernel32

ddraw

user32

gdi32

winspool.drv

advapi32

shell32

shlwapi

ole32

oleaut32

Exports

Exports

Sections

.text Size: 265KB - Virtual size: 6.5MB

.rsrc Size: 10KB - Virtual size: 12KB

.reloc Size: 512B - Virtual size: 512B

.text
Size: 265KB - Virtual size: 6.5MB

.rsrc
Size: 10KB - Virtual size: 12KB

.reloc
Size: 512B - Virtual size: 512B