5381c4bf2279ed284c76935ae8dee88eca1ea694e98fa4ff44cd2ed7cadac83a

Sharing

Copy URL

Twitter E-mail

General

Target

5381c4bf2279ed284c76935ae8dee88eca1ea694e98fa4ff44cd2ed7cadac83a
Size

1.9MB
MD5

1d0c1e6e43bf9c8764103b14ae297f5a
SHA1

a7c3a02f9035cfa6c8c1014531dba97871ed4b4e
SHA256

5381c4bf2279ed284c76935ae8dee88eca1ea694e98fa4ff44cd2ed7cadac83a
SHA512

21341ae3465665b15eea0c04973fcefe4bbb593d5a666cfee1843dabf1a614ce39f9f19a264d8805ce1302e4aea30c28f2cf3ec05292381e67aa228c2f9fc12d
SSDEEP

49152:BHVpFf6FYxlv7OONzYVZ0oc4ELGzfUiFy5F0Wyscu0lSNhkoS/:gYHcY4Uuy5iWMu0lYtS/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5381c4bf2279ed284c76935ae8dee88eca1ea694e98fa4ff44cd2ed7cadac83a

Files

5381c4bf2279ed284c76935ae8dee88eca1ea694e98fa4ff44cd2ed7cadac83a
.exe windows x64

c321c8af9198d7487d3c53ba32e7978d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

libvlc

libvlc_audio_set_volume
libvlc_event_attach
libvlc_media_new_path
libvlc_media_player_event_manager
libvlc_media_player_new_from_media
libvlc_media_player_play
libvlc_media_player_release
libvlc_media_player_stop
libvlc_media_release
libvlc_new
libvlc_release
libvlc_video_set_callbacks
libvlc_video_set_format

sdl2_mixer

Mix_LoadMUS_RW
Mix_FreeMusic
Mix_OpenAudio
Mix_Quit
Mix_Init
Mix_HaltChannel
Mix_Volume
Mix_PlayChannelTimed
Mix_SetPanning
Mix_HookMusicFinished
Mix_PlayMusic
Mix_VolumeMusic
Mix_ChannelFinished
Mix_FreeChunk
Mix_LoadWAV_RW
Mix_QuerySpec
Mix_AllocateChannels
Mix_PauseMusic
Mix_Pause
Mix_HaltMusic

sdl2

SDL_snprintf
SDL_GetPixelFormatName
SDL_PixelFormatEnumToMasks
SDL_SetError
SDL_Error
SDL_RWFromFile
SDL_AllocRW
SDL_FreeRW
SDL_CreateRGBSurface
SDL_CreateRGBSurfaceWithFormat
SDL_LoadBMP_RW
SDL_SaveBMP_RW
SDL_UpperBlitScaled
SDL_GetNumVideoDrivers
SDL_GetVideoDriver
SDL_VideoInit
SDL_GetCurrentVideoDriver
SDL_GetNumVideoDisplays
SDL_GetDisplayName
SDL_GetDisplayBounds
SDL_GetNumDisplayModes
SDL_GetDisplayMode
SDL_GetDesktopDisplayMode
SDL_GetCurrentDisplayMode
SDL_strlcpy
SDL_CreateWindow
SDL_GetWindowFromID
SDL_SetWindowIcon
SDL_GetWindowSize
SDL_SetWindowMinimumSize
SDL_SetWindowMaximumSize
SDL_ShowWindow
SDL_SetWindowFullscreen
SDL_DestroyWindow
SDL_GL_SetAttribute
SDL_GetNumAudioDrivers
SDL_GetAudioDriver
SDL_AudioInit
SDL_AudioQuit
SDL_GetCurrentAudioDriver
SDL_GetKeyName
SDL_NumJoysticks
SDL_JoystickNameForIndex
SDL_JoystickOpen
SDL_JoystickGetGUID
SDL_JoystickGetGUIDString
SDL_JoystickInstanceID
SDL_JoystickNumAxes
SDL_JoystickNumBalls
SDL_JoystickNumHats
SDL_memset
SDL_JoystickEventState
SDL_JoystickClose
SDL_GameControllerOpen
SDL_GameControllerClose
SDL_LogSetPriority
SDL_GetNumRenderDrivers
SDL_GetRenderDriverInfo
SDL_CreateRenderer
SDL_GetRendererInfo
SDL_UpdateTexture
SDL_RenderSetLogicalSize
SDL_RenderSetScale
SDL_SetRenderDrawColor
SDL_DestroyRenderer
SDL_InitSubSystem
SDL_Quit
SDL_GetWindowWMInfo
SDL_HasIntersection
SDL_SetTextureColorMod
SDL_toupper
SDL_strrchr
SDL_strcmp
SDL_strncmp
SDL_ClearError
SDL_ReadLE16
SDL_ReadLE32
SDL_realloc
SDL_ConvertSurfaceFormat
SDL_LoadObject
SDL_LoadFunction
SDL_UnloadObject
SDL_strchr
SDL_GetKeyboardState
SDL_RWclose
SDL_RWFromMem
SDL_UnlockTexture
SDL_LockTexture
SDL_CreateTexture
SDL_DestroyMutex
SDL_UnlockMutex
SDL_LockMutex
SDL_wcslen
SDL_CreateMutex
SDL_strlen
SDL_LogError
SDL_MapRGB
SDL_GetError
SDL_RenderPresent
SDL_RenderCopy
SDL_RenderClear
SDL_SetTextureAlphaMod
SDL_CreateTextureFromSurface
SDL_SetHint
SDL_PollEvent
SDL_IsGameController
SDL_UnlockSurface
SDL_LockSurface
SDL_IntersectRect
SDL_DestroyTexture
SDL_FreeSurface
SDL_free
SDL_malloc
SDL_GetTicks
SDL_strcasecmp
SDL_Log
SDL_Delay
SDL_GetWindowFlags
SDL_UpperBlit
SDL_FillRect
SDL_SetColorKey
SDL_CreateRGBSurfaceFrom
SDL_memcpy
SDL_iconv_string
SDL_SetMainReady
SDL_ShowSimpleMessageBox
SDL_SetWindowDisplayMode
SDL_JoystickNumButtons

steam_api64

SteamAPI_RunCallbacks
SteamAPI_RegisterCallback
SteamAPI_UnregisterCallback
SteamInternal_FindOrCreateUserInterface
SteamInternal_ContextInit
SteamAPI_RestartAppIfNecessary
SteamAPI_Init
SteamAPI_GetHSteamUser

imm32

ImmIsIME

kernel32

HeapFree
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
LocalFree
GetStartupInfoW
IsDebuggerPresent
SetUnhandledExceptionFilter
GetCommandLineW
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
HeapAlloc
GetModuleHandleW
GetFileTime
SetEndOfFile
SetFileAttributesA
CloseHandle
GetLastError
FormatMessageA
GetCurrentDirectoryA
CreateDirectoryA
GetProcessHeap
GetCurrentProcess
UnhandledExceptionFilter
IsProcessorFeaturePresent
GetTempPathA
GetUserDefaultLangID
lstrcmpA
TerminateProcess
GetLocalTime
CreateMutexA
FreeLibrary
GetProcAddress
LoadLibraryA

user32

SetWindowLongPtrA
FindWindowA
GetDesktopWindow
GetWindowRect
ClientToScreen
MessageBeep
EnableWindow
GetDlgItemTextA
GetDlgItem
EndDialog
SendMessageA
DialogBoxParamA
CallWindowProcA
PostQuitMessage
ShowCursor
wsprintfA
MessageBoxA
SetRect
CharPrevA
CharNextA

shell32

SHGetFolderPathA
ShellExecuteA
CommandLineToArgvW

ole32

CoUninitialize
CoInitialize

msvcp140

?_Xlength_error@std@@YAXPEBD@Z

shlwapi

PathAppendA

vcruntime140

memchr
memset
memcpy
memmove
__std_exception_copy
__std_exception_destroy
_CxxThrowException
__std_terminate
strstr
memcmp
_purecall
longjmp
strrchr
__C_specific_handler
__current_exception
__current_exception_context
__intrinsic_setjmp

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

exit
terminate
_get_narrow_winmain_command_line
_cexit
_crt_atexit
_register_onexit_function
_initialize_onexit_table
_initterm
_initterm_e
_invalid_parameter_noinfo_noreturn
_exit
_c_exit
_initialize_narrow_environment
_register_thread_local_exe_atexit_callback
_set_app_type
_configure_narrow_argv
_seh_filter_exe

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__stdio_common_vfprintf
putchar
fopen
__p__commode
fclose
__stdio_common_vsprintf
_fsopen
fread
_set_fmode
fwrite
ftell
fseek

api-ms-win-crt-math-l1-1-0

sqrt
atan2
sqrtf
__setusermatherr
pow
floor
sin
ceil
tan

api-ms-win-crt-heap-l1-1-0

malloc
_set_new_mode
_callnewh
calloc
realloc
free

api-ms-win-crt-filesystem-l1-1-0

remove
_mkdir

api-ms-win-crt-convert-l1-1-0

atol
atoi

api-ms-win-crt-utility-l1-1-0

qsort
srand
rand

api-ms-win-crt-time-l1-1-0

_difftime64
_time64

api-ms-win-crt-string-l1-1-0

strncpy
strcmp
strncmp

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Exports

Exports

IMG_Init
IMG_Linked_Version
IMG_Load
IMG_LoadBMP_RW
IMG_LoadCUR_RW
IMG_LoadGIF_RW
IMG_LoadICO_RW
IMG_LoadJPG_RW
IMG_LoadLBM_RW
IMG_LoadPCX_RW
IMG_LoadPNG_RW
IMG_LoadPNM_RW
IMG_LoadTGA_RW
IMG_LoadTIF_RW
IMG_LoadTexture
IMG_LoadTextureTyped_RW
IMG_LoadTexture_RW
IMG_LoadTyped_RW
IMG_LoadWEBP_RW
IMG_LoadXCF_RW
IMG_LoadXPM_RW
IMG_LoadXV_RW
IMG_Load_RW
IMG_Quit
IMG_ReadXPMFromArray
IMG_SavePNG
IMG_SavePNG_RW
IMG_isBMP
IMG_isCUR
IMG_isGIF
IMG_isICO
IMG_isJPG
IMG_isLBM
IMG_isPCX
IMG_isPNG
IMG_isPNM
IMG_isTIF
IMG_isWEBP
IMG_isXCF
IMG_isXPM
IMG_isXV
TTF_ByteSwappedUNICODE
TTF_CloseFont
TTF_FontAscent
TTF_FontDescent
TTF_FontFaceFamilyName
TTF_FontFaceIsFixedWidth
TTF_FontFaceStyleName
TTF_FontFaces
TTF_FontHeight
TTF_FontLineSkip
TTF_GetFontHinting
TTF_GetFontKerning
TTF_GetFontKerningSize
TTF_GetFontOutline
TTF_GetFontStyle
TTF_GlyphIsProvided
TTF_GlyphMetrics
TTF_Init
TTF_Linked_Version
TTF_OpenFont
TTF_OpenFontIndex
TTF_OpenFontIndexRW
TTF_OpenFontRW
TTF_Quit
TTF_RenderGlyph_Blended
TTF_RenderGlyph_Shaded
TTF_RenderGlyph_Solid
TTF_RenderText_Blended
TTF_RenderText_Blended_Wrapped
TTF_RenderText_Shaded
TTF_RenderText_Solid
TTF_RenderUNICODE_Blended
TTF_RenderUNICODE_Blended_Wrapped
TTF_RenderUNICODE_Shaded
TTF_RenderUNICODE_Solid
TTF_RenderUTF8_Blended
TTF_RenderUTF8_Blended_Wrapped
TTF_RenderUTF8_Shaded
TTF_RenderUTF8_Solid
TTF_SetFontHinting
TTF_SetFontKerning
TTF_SetFontOutline
TTF_SetFontStyle
TTF_SizeText
TTF_SizeUNICODE
TTF_SizeUTF8
TTF_WasInit

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 194KB - Virtual size: 194KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 66KB - Virtual size: 832KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 391KB - Virtual size: 390KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c321c8af9198d7487d3c53ba32e7978d

Headers

DLL Characteristics

File Characteristics

Imports

libvlc

sdl2_mixer

sdl2

steam_api64

imm32

kernel32

user32

shell32

ole32

msvcp140

shlwapi

vcruntime140

vcruntime140_1

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-locale-l1-1-0

Exports

Exports

Sections

.text Size: 1.3MB - Virtual size: 1.3MB

.rdata Size: 194KB - Virtual size: 194KB

.data Size: 66KB - Virtual size: 832KB

.pdata Size: 48KB - Virtual size: 47KB

.rsrc Size: 391KB - Virtual size: 390KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 1.3MB - Virtual size: 1.3MB

.rdata
Size: 194KB - Virtual size: 194KB

.data
Size: 66KB - Virtual size: 832KB

.pdata
Size: 48KB - Virtual size: 47KB

.rsrc
Size: 391KB - Virtual size: 390KB

.reloc
Size: 2KB - Virtual size: 2KB