93d79310a546b0c0a0e2500fb8a61509a98e8305c9bdd6f36279d457206fb963

Sharing

Copy URL Twitter E-mail

General

Target

93d79310a546b0c0a0e2500fb8a61509a98e8305c9bdd6f36279d457206fb963
Size

8.9MB
MD5

b9bb46329d742e4fa8f57bdadc726898
SHA1

8275403d1deebb847258ad66f5f3b11b0d7ef956
SHA256

93d79310a546b0c0a0e2500fb8a61509a98e8305c9bdd6f36279d457206fb963
SHA512

76b379462ba871daf90cfeed2f1341f30884eb21df1f2aadea9d14c3a755ae5e23ca1d667f58328f7c9bb407179b174c647edba9165b7a72e8721b5bd7b53359
SSDEEP

196608:vKZX4+9TvlBlOs1FYoXKGj7UzXQbR458CGfCddNQo08ox:vu4BdNQt8ox

Score

1^/10

Malware Config

Signatures

Files

93d79310a546b0c0a0e2500fb8a61509a98e8305c9bdd6f36279d457206fb963
.exe windows x86

7a8ab700dd57d263b60afc071a89bb14

Code Sign

0d:6a:a6
Certificate

Issuer

CN=CA Cert Signing Authority,OU=http://www.cacert.org,O=Root CA,1.2.840.113549.1.9.1=#0c12737570706f7274406361636572742e6f7267

Not Before

26/06/2013, 20:26

Not After

26/06/2015, 20:26

Subject

CN=Stefan Weil,1.2.840.113549.1.9.1=#0c0e7377407765696c6e65747a2e6465

Extended Key Usages

ExtKeyUsageEmailProtection
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
ExtKeyUsageMicrosoftServerGatedCrypto
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageDigitalSignature
KeyUsageKeyEncipherment
KeyUsageKeyAgreement

Certificate

Issuer

CN=CA Cert Signing Authority,OU=http://www.cacert.org,O=Root CA,1.2.840.113549.1.9.1=#0c12737570706f7274406361636572742e6f7267

Not Before

30/03/2003, 12:29

Not After

29/03/2033, 12:29

Subject

CN=CA Cert Signing Authority,OU=http://www.cacert.org,O=Root CA,1.2.840.113549.1.9.1=#0c12737570706f7274406361636572742e6f7267

a9:aa:90:a1:e0:c8:0e:45:b7:dc:35:5a:f0:c3:80:09:12:a2:b9:45
Signer

Actual PE Digest

a9:aa:90:a1:e0:c8:0e:45:b7:dc:35:5a:f0:c3:80:09:12:a2:b9:45

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

sdl2

SDL_CreateColorCursor
SDL_CreateCursor
SDL_CreateRGBSurfaceFrom
SDL_CreateRenderer
SDL_CreateTexture
SDL_CreateWindow
SDL_DestroyRenderer
SDL_DestroyTexture
SDL_DestroyWindow
SDL_FreeCursor
SDL_FreeSurface
SDL_GL_GetCurrentContext
SDL_GetCursor
SDL_GetError
SDL_GetModState
SDL_GetMouseState
SDL_GetWindowFlags
SDL_GetWindowFromID
SDL_GetWindowSize
SDL_GetWindowWMInfo
SDL_HideWindow
SDL_Init
SDL_LoadBMP_RW
SDL_MapRGB
SDL_PollEvent
SDL_QuitSubSystem
SDL_RWFromFile
SDL_RenderClear
SDL_RenderCopy
SDL_RenderPresent
SDL_RenderSetLogicalSize
SDL_SetColorKey
SDL_SetCursor
SDL_SetHint
SDL_SetRelativeMouseMode
SDL_SetWindowFullscreen
SDL_SetWindowGrab
SDL_SetWindowIcon
SDL_SetWindowSize
SDL_SetWindowTitle
SDL_ShowCursor
SDL_ShowWindow
SDL_UpdateTexture
SDL_WarpMouseInWindow

libbz2-1

BZ2_bzDecompress
BZ2_bzDecompressEnd
BZ2_bzDecompressInit

libcairo-2

cairo_fill
cairo_image_surface_create_for_data
cairo_paint
cairo_rectangle
cairo_scale
cairo_set_source_surface
cairo_surface_destroy

libcurl-4

curl_easy_cleanup
curl_easy_getinfo
curl_easy_init
curl_easy_perform
curl_easy_setopt
curl_global_init
curl_multi_add_handle
curl_multi_cleanup
curl_multi_info_read
curl_multi_init
curl_multi_remove_handle
curl_multi_setopt
curl_multi_socket_action

libgdk-3-0

gdk_cursor_new_for_display
gdk_cursor_new_from_pixbuf
gdk_device_get_position
gdk_device_warp
gdk_display_get_default
gdk_display_get_default_seat
gdk_display_get_monitor_at_window
gdk_event_get_device
gdk_event_get_scroll_deltas
gdk_monitor_get_geometry
gdk_seat_get_pointer
gdk_seat_grab
gdk_seat_ungrab
gdk_window_get_height
gdk_window_get_root_coords
gdk_window_get_width
gdk_window_set_cursor

libgdk_pixbuf-2.0-0

gdk_pixbuf_new_from_data
gdk_pixbuf_new_from_file

libglib-2.0-0

g_array_append_vals
g_array_free
g_array_get_element_size
g_array_insert_vals
g_array_new
g_array_prepend_vals
g_array_remove_index
g_array_set_size
g_array_sized_new
g_array_unref
g_ascii_strdown
g_ascii_table
g_ascii_tolower
g_assertion_message
g_assertion_message_cmpnum
g_assertion_message_expr
g_base64_decode
g_base64_decode_inplace
g_base64_encode
g_direct_equal
g_direct_hash
g_error_free
g_file_get_contents
g_file_set_contents
g_free
g_get_current_time
g_get_user_name
g_hash_table_add
g_hash_table_destroy
g_hash_table_foreach
g_hash_table_foreach_remove
g_hash_table_insert
g_hash_table_iter_init
g_hash_table_iter_next
g_hash_table_iter_remove
g_hash_table_lookup
g_hash_table_new
g_hash_table_new_full
g_hash_table_remove
g_hash_table_remove_all
g_hash_table_replace
g_hash_table_size
g_hash_table_unref
g_idle_source_new
g_int_equal
g_int_hash
g_list_append
g_list_delete_link
g_list_find_custom
g_list_first
g_list_foreach
g_list_free
g_list_index
g_list_insert_before
g_list_insert_sorted
g_list_remove
g_log
g_main_context_acquire
g_main_context_check
g_main_context_default
g_main_context_dispatch
g_main_context_find_source_by_id
g_main_context_get_thread_default
g_main_context_new
g_main_context_pop_thread_default
g_main_context_prepare
g_main_context_push_thread_default
g_main_context_query
g_main_context_ref
g_main_context_release
g_main_context_unref
g_main_loop_new
g_main_loop_quit
g_main_loop_run
g_main_loop_unref
g_malloc
g_malloc0
g_malloc0_n
g_malloc_n
g_memdup
g_once_impl
g_poll
g_printerr
g_ptr_array_add
g_ptr_array_foreach
g_ptr_array_free
g_ptr_array_new
g_ptr_array_new_with_free_func
g_ptr_array_set_size
g_ptr_array_sort
g_queue_clear
g_queue_find_custom
g_queue_foreach
g_queue_free
g_queue_get_length
g_queue_init
g_queue_insert_sorted
g_queue_is_empty
g_queue_new
g_queue_peek_head
g_queue_peek_tail
g_queue_pop_head
g_queue_push_head
g_queue_push_tail
g_queue_remove
g_rand_free
g_rand_int_range
g_rand_new
g_random_int
g_random_int_range
g_realloc
g_realloc_n
g_slice_alloc
g_slice_free1
g_slist_append
g_slist_copy
g_slist_find
g_slist_foreach
g_slist_free
g_slist_free_1
g_slist_insert_sorted
g_slist_prepend
g_slist_remove
g_slist_sort
g_source_add_poll
g_source_attach
g_source_destroy
g_source_new
g_source_ref
g_source_remove
g_source_remove_poll
g_source_set_callback
g_source_set_can_recurse
g_source_set_name
g_source_unref
g_str_equal
g_str_has_prefix
g_str_has_suffix
g_str_hash
g_strchomp
g_strchug
g_strcmp0
g_strconcat
g_strdup
g_strdup_printf
g_strdup_vprintf
g_strfreev
g_string_append
g_string_append_len
g_string_append_printf
g_string_append_unichar
g_string_append_vprintf
g_string_erase
g_string_free
g_string_insert_c
g_string_new
g_string_new_len
g_string_prepend
g_string_prepend_c
g_string_sized_new
g_string_truncate
g_string_vprintf
g_strjoinv
g_strlcat
g_strlcpy
g_strndup
g_strrstr
g_strsplit
g_strstr_len
g_strv_length
g_time_val_to_iso8601
g_timeout_source_new
g_tree_destroy
g_tree_foreach
g_tree_insert
g_tree_lookup
g_tree_new
g_tree_nnodes
g_tree_ref
g_tree_remove
g_try_malloc
g_try_malloc0
g_try_malloc0_n
g_try_malloc_n
g_try_realloc
g_unichar_toupper
g_usleep
g_utf16_to_utf8
g_utf8_get_char
g_utf8_skip
g_utf8_to_utf16
g_utf8_validate
g_vasprintf
g_warn_message
g_win32_error_message

libgnutls-30

gnutls_anon_allocate_client_credentials
gnutls_anon_allocate_server_credentials
gnutls_anon_free_client_credentials
gnutls_anon_free_server_credentials
gnutls_anon_set_server_dh_params
gnutls_certificate_allocate_credentials
gnutls_certificate_free_credentials
gnutls_certificate_get_peers
gnutls_certificate_server_set_request
gnutls_certificate_set_dh_params
gnutls_certificate_set_x509_crl_file
gnutls_certificate_set_x509_key_file2
gnutls_certificate_set_x509_trust_file
gnutls_certificate_verify_peers2
gnutls_cipher_get
gnutls_cipher_get_key_size
gnutls_credentials_set
gnutls_deinit
gnutls_dh_params_deinit
gnutls_dh_params_generate2
gnutls_dh_params_import_pkcs3
gnutls_dh_params_init
gnutls_global_init
gnutls_handshake
gnutls_init
gnutls_priority_set_direct
gnutls_record_get_direction
gnutls_record_recv
gnutls_record_send
gnutls_rnd
gnutls_strerror
gnutls_transport_set_ptr
gnutls_transport_set_pull_function
gnutls_transport_set_push_function
gnutls_x509_crt_check_hostname
gnutls_x509_crt_deinit
gnutls_x509_crt_get_activation_time
gnutls_x509_crt_get_basic_constraints
gnutls_x509_crt_get_dn
gnutls_x509_crt_get_expiration_time
gnutls_x509_crt_get_key_purpose_oid
gnutls_x509_crt_get_key_usage
gnutls_x509_crt_import
gnutls_x509_crt_init
gnutls_x509_crt_list_import
gnutls_x509_crt_list_verify

libgobject-2.0-0

g_cclosure_new_swap
g_object_ref
g_object_set
g_object_set_data
g_object_unref
g_signal_connect_data
g_type_check_instance_cast

libgtk-3-0

gtk_accel_group_connect
gtk_accel_group_new
gtk_accel_label_get_type
gtk_accel_label_set_accel
gtk_accel_map_add_entry
gtk_bin_get_child
gtk_bin_get_type
gtk_box_get_type
gtk_box_new
gtk_box_pack_start
gtk_check_menu_item_get_active
gtk_check_menu_item_get_type
gtk_check_menu_item_new_with_mnemonic
gtk_check_menu_item_set_active
gtk_container_add
gtk_container_get_type
gtk_container_remove
gtk_disable_setlocale
gtk_drawing_area_new
gtk_init_check_abi_check
gtk_label_new
gtk_menu_bar_new
gtk_menu_get_type
gtk_menu_item_activate
gtk_menu_item_get_type
gtk_menu_item_new_with_mnemonic
gtk_menu_item_set_accel_path
gtk_menu_item_set_submenu
gtk_menu_new
gtk_menu_set_accel_group
gtk_menu_shell_append
gtk_menu_shell_get_type
gtk_notebook_append_page
gtk_notebook_get_current_page
gtk_notebook_get_type
gtk_notebook_new
gtk_notebook_page_num
gtk_notebook_set_current_page
gtk_notebook_set_show_border
gtk_notebook_set_show_tabs
gtk_notebook_set_tab_label_text
gtk_radio_menu_item_get_group
gtk_radio_menu_item_get_type
gtk_radio_menu_item_new_with_mnemonic
gtk_separator_menu_item_new
gtk_widget_add_events
gtk_widget_destroy
gtk_widget_get_display
gtk_widget_get_realized
gtk_widget_get_screen
gtk_widget_get_settings
gtk_widget_get_type
gtk_widget_get_window
gtk_widget_grab_focus
gtk_widget_hide
gtk_widget_queue_draw_area
gtk_widget_set_can_focus
gtk_widget_set_sensitive
gtk_widget_set_size_request
gtk_widget_show
gtk_widget_show_all
gtk_window_add_accel_group
gtk_window_fullscreen
gtk_window_get_type
gtk_window_new
gtk_window_resize
gtk_window_set_geometry_hints
gtk_window_set_icon
gtk_window_set_title
gtk_window_unfullscreen

libintl-8

libintl_bindtextdomain
libintl_fprintf
libintl_gettext
libintl_setlocale
libintl_textdomain

libjpeg-8

jpeg_CreateCompress
jpeg_destroy_compress
jpeg_finish_compress
jpeg_set_defaults
jpeg_set_quality
jpeg_start_compress
jpeg_std_error
jpeg_write_scanlines

liblzo2-2

__lzo_init_v2
lzo1x_1_compress

libncursesw6

COLOR_PAIRS
COLS
LINES
acs_map
curs_set
delwin
endwin
init_pair
initscr
intrflush
keypad
newpad
nodelay
noecho
nonl
pnoutrefresh
raw
scrollok
start_color
stdscr
waddchnstr
wclear
werase
wgetch
wmove
wnoutrefresh
wrefresh

libnettle-6

nettle_aes_decrypt
nettle_aes_encrypt
nettle_aes_set_decrypt_key
nettle_aes_set_encrypt_key
nettle_cast128_decrypt
nettle_cast128_encrypt
nettle_cast5_set_key
nettle_cbc_decrypt
nettle_cbc_encrypt
nettle_ctr_crypt
nettle_des3_decrypt
nettle_des3_encrypt
nettle_des3_set_key
nettle_des_decrypt
nettle_des_encrypt
nettle_des_set_key
nettle_hmac_md5_digest
nettle_hmac_md5_set_key
nettle_hmac_md5_update
nettle_hmac_ripemd160_digest
nettle_hmac_ripemd160_set_key
nettle_hmac_ripemd160_update
nettle_hmac_sha1_digest
nettle_hmac_sha1_set_key
nettle_hmac_sha1_update
nettle_hmac_sha224_digest
nettle_hmac_sha224_set_key
nettle_hmac_sha256_digest
nettle_hmac_sha256_set_key
nettle_hmac_sha256_update
nettle_hmac_sha384_digest
nettle_hmac_sha384_set_key
nettle_hmac_sha512_digest
nettle_hmac_sha512_set_key
nettle_hmac_sha512_update
nettle_md5_digest
nettle_md5_init
nettle_md5_update
nettle_pbkdf2
nettle_ripemd160_digest
nettle_ripemd160_init
nettle_ripemd160_update
nettle_serpent_decrypt
nettle_serpent_encrypt
nettle_serpent_set_key
nettle_sha1_digest
nettle_sha1_init
nettle_sha1_update
nettle_sha224_digest
nettle_sha224_init
nettle_sha256_digest
nettle_sha256_init
nettle_sha256_update
nettle_sha384_digest
nettle_sha384_init
nettle_sha512_digest
nettle_sha512_init
nettle_sha512_update
nettle_twofish_decrypt
nettle_twofish_encrypt
nettle_twofish_set_key

libpixman-1-0

pixman_format_supported_source
pixman_image_composite
pixman_image_create_bits
pixman_image_create_solid_fill
pixman_image_fill_rectangles
pixman_image_get_data
pixman_image_get_format
pixman_image_get_height
pixman_image_get_stride
pixman_image_get_width
pixman_image_ref
pixman_image_set_destroy_function
pixman_image_unref
pixman_region_extents
pixman_region_fini
pixman_region_init
pixman_region_init_rect
pixman_region_intersect
pixman_region_translate

libpng16-16

png_create_info_struct
png_create_write_struct_2
png_destroy_write_struct
png_free
png_get_io_ptr
png_malloc
png_set_IHDR
png_set_PLTE
png_set_compression_level
png_set_filter
png_set_write_fn
png_write_end
png_write_info
png_write_row

libssh2-1

libssh2_agent_connect
libssh2_agent_free
libssh2_agent_get_identity
libssh2_agent_init
libssh2_agent_list_identities
libssh2_agent_userauth
libssh2_hostkey_hash
libssh2_init
libssh2_knownhost_checkp
libssh2_knownhost_free
libssh2_knownhost_init
libssh2_knownhost_readfile
libssh2_session_block_directions
libssh2_session_disconnect_ex
libssh2_session_free
libssh2_session_get_blocking
libssh2_session_handshake
libssh2_session_hostkey
libssh2_session_init_ex
libssh2_session_last_error
libssh2_session_set_blocking
libssh2_sftp_close_handle
libssh2_sftp_fstat_ex
libssh2_sftp_fsync
libssh2_sftp_init
libssh2_sftp_last_error
libssh2_sftp_open_ex
libssh2_sftp_read
libssh2_sftp_seek64
libssh2_sftp_shutdown
libssh2_sftp_write
libssh2_userauth_list

libusb-1.0

libusb_alloc_streams
libusb_alloc_transfer
libusb_attach_kernel_driver
libusb_cancel_transfer
libusb_claim_interface
libusb_clear_halt
libusb_close
libusb_detach_kernel_driver
libusb_free_config_descriptor
libusb_free_device_list
libusb_free_ss_endpoint_companion_descriptor
libusb_free_streams
libusb_free_transfer
libusb_get_active_config_descriptor
libusb_get_bus_number
libusb_get_config_descriptor
libusb_get_device_address
libusb_get_device_descriptor
libusb_get_device_list
libusb_get_device_speed
libusb_get_port_numbers
libusb_get_ss_endpoint_companion_descriptor
libusb_get_string_descriptor_ascii
libusb_init
libusb_kernel_driver_active
libusb_open
libusb_ref_device
libusb_release_interface
libusb_reset_device
libusb_set_configuration
libusb_set_debug
libusb_set_interface_alt_setting
libusb_submit_transfer
libusb_transfer_set_stream_id
libusb_unref_device

libusbredirparser-1

usbredirfilter_check
usbredirfilter_string_to_rules
usbredirparser_caps_set_cap
usbredirparser_create
usbredirparser_destroy
usbredirparser_do_read
usbredirparser_do_write
usbredirparser_init
usbredirparser_peer_has_cap
usbredirparser_send_alloc_bulk_streams
usbredirparser_send_bulk_packet
usbredirparser_send_cancel_data_packet
usbredirparser_send_control_packet
usbredirparser_send_filter_filter
usbredirparser_send_filter_reject
usbredirparser_send_free_bulk_streams
usbredirparser_send_get_alt_setting
usbredirparser_send_get_configuration
usbredirparser_send_interrupt_packet
usbredirparser_send_iso_packet
usbredirparser_send_reset
usbredirparser_send_set_alt_setting
usbredirparser_send_set_configuration
usbredirparser_send_start_bulk_receiving
usbredirparser_send_start_interrupt_receiving
usbredirparser_send_start_iso_stream
usbredirparser_send_stop_bulk_receiving
usbredirparser_send_stop_interrupt_receiving
usbredirparser_send_stop_iso_stream
usbredirparser_serialize
usbredirparser_unserialize

zlib1

compress
compress2
compressBound
crc32
deflate
deflateEnd
deflateInit2_
deflateInit_
deflateParams
deflateReset
inflate
inflateEnd
inflateInit2_
inflateInit_
inflateReset
uncompress

advapi32

RegCloseKey
RegEnumKeyExA
RegOpenKeyExA
RegQueryValueExA

iphlpapi

GetNetworkParams

kernel32

AcquireSRWLockExclusive
ClearCommError
CloseHandle
CommConfigDialogA
ConnectNamedPipe
ConvertThreadToFiber
CreateEventA
CreateFiber
CreateFileA
CreateIoCompletionPort
CreateNamedPipeA
CreateSemaphoreA
CreateThread
DeleteCriticalSection
DeleteFiber
DeviceIoControl
EnterCriticalSection
FindFirstVolumeW
FindNextVolumeW
FindVolumeClose
FlushFileBuffers
FormatMessageA
FormatMessageW
GetConsoleMode
GetCurrentDirectoryA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDefaultCommConfigA
GetDiskFreeSpaceA
GetDiskFreeSpaceExA
GetDiskFreeSpaceExW
GetDriveTypeA
GetFileAttributesA
GetFileInformationByHandle
GetFileSize
GetFileSizeEx
GetFileType
GetLastError
GetLogicalDriveStringsA
GetLogicalProcessorInformation
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetOverlappedResult
GetProcAddress
GetQueuedCompletionStatus
GetStartupInfoA
GetStdHandle
GetSystemInfo
GetSystemTimeAsFileTime
GetTempFileNameA
GetTempPathA
GetThreadTimes
GetTickCount
GetTimeZoneInformation
GetVersion
GetVolumeInformationW
GlobalAlloc
GlobalFree
InitializeConditionVariable
InitializeCriticalSection
InitializeSRWLock
IsDBCSLeadByteEx
LeaveCriticalSection
LocalFree
MultiByteToWideChar
OpenThread
PeekNamedPipe
QueryPerformanceCounter
QueryPerformanceFrequency
QueueUserAPC
ReadConsoleInputA
ReadFile
ReleaseSRWLockExclusive
ReleaseSemaphore
ResetEvent
SetCommMask
SetCommState
SetCommTimeouts
SetConsoleCtrlHandler
SetConsoleMode
SetEndOfFile
SetEvent
SetFilePointer
SetUnhandledExceptionFilter
SetupComm
Sleep
SleepConditionVariableSRW
SleepEx
SwitchToFiber
TerminateProcess
TerminateThread
TlsGetValue
TryAcquireSRWLockExclusive
TryEnterCriticalSection
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WakeAllConditionVariable
WakeConditionVariable
WideCharToMultiByte
WriteFile
lstrlenA

msvcrt

__argv
__dllonexit
__getmainargs
__initenv
__lconv_init
__mb_cur_max
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_beginthreadex
_cexit
_commit
_endthreadex
_errno
_exit
_findclose
_findfirst
_fmode
_fullpath
_get_osfhandle
_initterm
_iob
_lock
_lseeki64
_onexit
_setjmp3
_snwprintf
_stati64
_stricmp
_strnicmp
time
mktime
localtime
gmtime
exit
fclose
feof
ferror
fflush
fgets
fopen
fprintf
fputc
fread
free
frexp
fseek
ftell
fwprintf
fwrite
getc
getenv
isalnum
isalpha
isgraph
islower
isspace
isupper
isxdigit
localeconv
log10
malloc
memchr
memcmp
memcpy
memmove
memset
perror
putc
putchar
puts
qsort
raise
rand
realloc
rename
setbuf
setlocale
setvbuf
signal
srand
strcat
strchr
strcmp
strcpy
strcspn
strerror
strftime
strlen
strncmp
strncpy
strrchr
strspn
strstr
strtok
strtol
strtoul
_telli64
_unlock
abort
atoi
tan
tolower
toupper
ungetc
vfprintf
wcscpy
wcslen
wcstombs
bsearch
calloc
clearerr
_findnext
longjmp
_write
_unlink
_strdup
_rmdir
_read
_putenv
_open
_mkdir
_getpid
_fdopen
_dup2
_close
_access

ole32

CoCreateInstance
CoInitialize

shell32

SHGetFolderPathA

user32

GetForegroundWindow
MessageBoxW

winmm

timeBeginPeriod
timeEndPeriod
timeGetDevCaps

ws2_32

WSACleanup
WSAEnumNetworkEvents
WSAEventSelect
WSAGetLastError
WSASetLastError
WSAStartup
__WSAFDIsSet
accept
bind
closesocket
connect
freeaddrinfo
getaddrinfo
gethostbyname
getnameinfo
getpeername
getsockname
getsockopt
htonl
htons
inet_addr
inet_ntoa
ioctlsocket
listen
ntohl
ntohs
recv
recvfrom
select
send
sendto
setsockopt
shutdown
socket

libgcc_s_sjlj-1

__clrsbdi2
__clrsbsi2
__ctzdi2
__divdi3
__emutls_get_address
__moddi3
__popcountdi2
__popcountsi2
__udivdi3
__umoddi3

Sections

.text
Size: 4.7MB - Virtual size: 4.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 554KB - Virtual size: 553KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3.7MB - Virtual size: 3.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4.3MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

7a8ab700dd57d263b60afc071a89bb14

Code Sign

0d:6a:a6Certificate

Extended Key Usages

Key Usages

Certificate

a9:aa:90:a1:e0:c8:0e:45:b7:dc:35:5a:f0:c3:80:09:12:a2:b9:45Signer

Headers

DLL Characteristics

File Characteristics

Imports

sdl2

libbz2-1

libcairo-2

libcurl-4

libgdk-3-0

libgdk_pixbuf-2.0-0

libglib-2.0-0

libgnutls-30

libgobject-2.0-0

libgtk-3-0

libintl-8

libjpeg-8

liblzo2-2

libncursesw6

libnettle-6

libpixman-1-0

libpng16-16

libssh2-1

libusb-1.0

libusbredirparser-1

zlib1

advapi32

iphlpapi

kernel32

msvcrt

ole32

shell32

user32

winmm

ws2_32

libgcc_s_sjlj-1

Sections

.text Size: 4.7MB - Virtual size: 4.7MB

.data Size: 554KB - Virtual size: 553KB

.rdata Size: 3.7MB - Virtual size: 3.7MB

.bss Size: - Virtual size: 4.3MB

.idata Size: 32KB - Virtual size: 31KB

.CRT Size: 512B - Virtual size: 52B

.tls Size: 512B - Virtual size: 32B

.rsrc Size: 6KB - Virtual size: 6KB

0d:6a:a6
Certificate

a9:aa:90:a1:e0:c8:0e:45:b7:dc:35:5a:f0:c3:80:09:12:a2:b9:45
Signer

.text
Size: 4.7MB - Virtual size: 4.7MB

.data
Size: 554KB - Virtual size: 553KB

.rdata
Size: 3.7MB - Virtual size: 3.7MB

.bss
Size: - Virtual size: 4.3MB

.idata
Size: 32KB - Virtual size: 31KB

.CRT
Size: 512B - Virtual size: 52B

.tls
Size: 512B - Virtual size: 32B

.rsrc
Size: 6KB - Virtual size: 6KB