808399ebe380002d0389ae5bb300862c3b84749cbb46272a1b0d8d020001cd73

Sharing

Copy URL Twitter E-mail

General

Target

808399ebe380002d0389ae5bb300862c3b84749cbb46272a1b0d8d020001cd73
Size

5.0MB
MD5

3472705105e01c43d22e8aa0fcb2669f
SHA1

cdc6e3d64b4cd6eeb6ca5823f5c052774c7503aa
SHA256

808399ebe380002d0389ae5bb300862c3b84749cbb46272a1b0d8d020001cd73
SHA512

17b0e4d1e1dfa28a5f37aff9ec2b388ed668413e6dfb31d6d96fcacef9de9cc2034af8cb1870d07cccb24aecd9c039695f2c402dfe6191aa39cc3089e73127f0
SSDEEP

49152:/Whff3zmp+6VjxROaYDRg7HYLOAv/d9UveXTzqjdbkHDZL9RgX78azcyD6Q0qb:/mXjmg6FOtRg7VAvFHHqZbk1La8M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
808399ebe380002d0389ae5bb300862c3b84749cbb46272a1b0d8d020001cd73

Files

808399ebe380002d0389ae5bb300862c3b84749cbb46272a1b0d8d020001cd73
.dll regsvr32 windows x86

84eea3e05695fe5ea01d2c94971188fb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

gdi32

MoveToEx
CreatePen
LineTo
SetBkColor
SetTextColor
SelectObject
CreateDIBSection
DeleteObject
SetBkMode
CreateSolidBrush
CreateFontIndirectW

bcrypt

BCryptHashData
BCryptCreateHash
BCryptFinishHash
BCryptGetProperty
BCryptOpenAlgorithmProvider

crypt32

CryptBinaryToStringW

kernel32

InitializeSListHead
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
GetCurrentProcessId
GetSystemTimeAsFileTime
MultiByteToWideChar
GetCurrentThreadId
OutputDebugStringA
IsDebuggerPresent
QueryPerformanceCounter
FindResourceW
LoadResource
WaitForSingleObjectEx
SizeofResource
GetTickCount64
Sleep
FindClose
FindNextFileA
FindFirstFileA
lstrlenW
DisableThreadLibraryCalls
GetModuleFileNameW
GetLastError
GlobalMemoryStatusEx
K32GetProcessMemoryInfo
GetCurrentProcess
ResetEvent
SetEvent
DeleteFileW
InitOnceComplete
EnterCriticalSection
CloseHandle
GetModuleHandleW
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
InitOnceExecuteOnce
GetProcAddress
GetModuleHandleExW
FreeLibrary
GetSystemInfo
LockResource
WideCharToMultiByte
InitOnceBeginInitialize
CreateEventW

user32

TranslateMessage
GetWindowLongW
DefWindowProcW
GetKeyState
DestroyWindow
GetDC
IsWindowVisible
SetWindowPos
FillRect
CreateWindowExW
ScreenToClient
SendMessageW
PeekMessageW
SetWindowTextW
WindowFromPoint
LoadStringW
ShowWindow
SetTimer
RegisterTouchWindow
SetGestureConfig
MessageBoxA
GetSysColor
GetFocus
SetLayeredWindowAttributes
LoadCursorW
SetParent
SetCapture
DispatchMessageW
RegisterClassExW
GetClassInfoExW
SetFocus
GetCursor
SetCursor
SetWindowLongW
DrawTextW
KillTimer
GetPointerType
UpdateWindow
ReleaseCapture
InvalidateRect
GetCursorPos
GetGestureInfo
BeginPaint
EndPaint
GetWindowTextW
PostMessageW
GetForegroundWindow
GetClientRect
GetAncestor
MoveWindow

advapi32

RegCloseKey
RegDeleteValueW
RegOpenKeyExW
EventWriteTransfer
EventRegister
EventSetInformation
EventUnregister
RegQueryValueExW
RegCreateKeyExW
RegDeleteTreeW
RegSetValueExW

shell32

SHChangeNotify

ole32

StringFromCLSID
CoInitializeEx
CreateStreamOnHGlobal
PropVariantClear
CoCreateInstanceEx
StringFromGUID2
CoCreateGuid
CoUninitialize
CoCreateInstance

msvcp140

??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@M@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@I@Z
_Mtx_trylock
?sgetc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEGXZ
?snextc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEGXZ
??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??1?$basic_istream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?_Xbad_function_call@std@@YAXXZ
?_Xlength_error@std@@YAXPBD@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?_Ipfx@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE_N_N@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?overflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHH@Z
?_Xout_of_range@std@@YAXPBD@Z
?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ
?_ReportUnobservedException@details@Concurrency@@YAXXZ
?_Schedule_chore@details@Concurrency@@YAHPAU_Threadpool_chore@12@@Z
?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QAEXXZ
?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QAEXXZ
?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QAEXXZ
?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QAEXXZ
?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QAEXXZ
?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QAEX_N@Z
?_Release_chore@details@Concurrency@@YAXPAU_Threadpool_chore@12@@Z
?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AAEXXZ
?_Capture@_ContextCallback@details@Concurrency@@AAEXXZ
?_IsCurrentOriginSTA@_ContextCallback@details@Concurrency@@CA_NXZ
?_Assign@_ContextCallback@details@Concurrency@@AAEXPAX@Z
?_Reset@_ContextCallback@details@Concurrency@@AAEXXZ
?_CallInContext@_ContextCallback@details@Concurrency@@QBEXV?$function@$$A6AXXZ@std@@_N@Z
??0task_continuation_context@Concurrency@@AAE@XZ
?__ExceptionPtrCreate@@YAXPAX@Z
_Cnd_init_in_situ
?__ExceptionPtrCopy@@YAXPAXPBX@Z
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?_Throw_Cpp_error@std@@YAXH@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_Throw_C_error@std@@YAXH@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z
_Mtx_destroy_in_situ
?__ExceptionPtrDestroy@@YAXPAX@Z
_Mtx_lock
?__ExceptionPtrCurrentException@@YAXPAX@Z
_Mtx_init_in_situ
_Cnd_do_broadcast_at_thread_exit
_Cnd_wait
_Thrd_detach
_Mtx_unlock
_Cnd_broadcast
_Cnd_destroy_in_situ
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAPAD0PAH001@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??_D?$basic_istream@DU?$char_traits@D@std@@@std@@QAEXXZ
?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHH@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@_JH@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@U_Mbstatet@@@2@XZ
?always_noconv@codecvt_base@std@@QBE_NXZ
??Bid@locale@std@@QAEIXZ
?_Syserror_map@std@@YAPBDH@Z
?__ExceptionPtrRethrow@@YAXPBX@Z
_Query_perf_counter
_Query_perf_frequency
?uncaught_exception@std@@YA_NXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@V?$fpos@U_Mbstatet@@@2@@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@M@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@V?$fpos@U_Mbstatet@@@2@@Z
?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@_JH@Z
?tellp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@U_Mbstatet@@@2@XZ
?_Xinvalid_argument@std@@YAXPBD@Z
?_Xbad_alloc@std@@YAXXZ
?classic@locale@std@@SAABV12@XZ
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?imbue@?$basic_ios@DU?$char_traits@D@std@@@std@@QAE?AVlocale@2@ABV32@@Z
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z
?getline@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z
?id@?$ctype@D@std@@2V0locale@2@A
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_K@Z
_Thrd_yield
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PBX@Z
?__ExceptionPtrToBool@@YA_NPBX@Z
?widen@?$ctype@_W@std@@QBE_WD@Z
?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_W_J@Z
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z
?id@?$ctype@_W@std@@2V0locale@2@A
_Thrd_id
_Xtime_get_ticks
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAM@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAH@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAI@Z
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
_Strcoll
_Strxfrm
??0_Locinfo@std@@QAE@PBD@Z
??1_Locinfo@std@@QAE@XZ
?_Getcoll@_Locinfo@std@@QBE?AU_Collvec@@XZ
?c_str@?$_Yarn@D@std@@QBEPBDXZ
??0facet@locale@std@@IAE@I@Z
??1facet@locale@std@@MAE@XZ
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
?tolower@?$ctype@D@std@@QBEDD@Z
?tolower@?$ctype@D@std@@QBEPBDPADPBD@Z
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UAEXXZ
?id@?$collate@D@std@@2V0locale@2@A
?is@?$ctype@_W@std@@QBE_NF_W@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
_Cnd_signal

concrt140

??0message_not_found@Concurrency@@QAE@XZ
?_UnderlyingYield@details@Concurrency@@YAXXZ
?_Internal_throw_exception@_Concurrent_queue_base_v4@details@Concurrency@@IBEXXZ
?_Internal_finish_clear@_Concurrent_queue_base_v4@details@Concurrency@@IAEXXZ
?_Internal_empty@_Concurrent_queue_base_v4@details@Concurrency@@IBE_NXZ
?_Internal_pop_if_present@_Concurrent_queue_base_v4@details@Concurrency@@IAE_NPAX@Z
?_Internal_push@_Concurrent_queue_base_v4@details@Concurrency@@IAEXPBX@Z
??1_Concurrent_queue_base_v4@details@Concurrency@@MAE@XZ
??0_Concurrent_queue_base_v4@details@Concurrency@@IAE@I@Z
?_Release@_Scheduler@details@Concurrency@@QAEIXZ
?_Reference@_Scheduler@details@Concurrency@@QAEIXZ
??1_Scoped_lock@_ReentrantPPLLock@details@Concurrency@@QAE@XZ
??0_Scoped_lock@_ReentrantPPLLock@details@Concurrency@@QAE@AAV123@@Z
??0_ReentrantPPLLock@details@Concurrency@@QAE@XZ
?_Yield@_Context@details@Concurrency@@SAXXZ
?_Get@_CurrentScheduler@details@Concurrency@@SA?AV_Scheduler@23@XZ
?_ScheduleTask@_CurrentScheduler@details@Concurrency@@SAXP6AXPAX@Z0@Z
??0_Runtime_object@details@Concurrency@@QAE@XZ
?_Stop@_Timer@details@Concurrency@@IAEXXZ
?_Start@_Timer@details@Concurrency@@IAEXXZ
??1_Timer@details@Concurrency@@MAE@XZ
??0_Timer@details@Concurrency@@IAE@I_N@Z
??1_Scoped_lock@_NonReentrantPPLLock@details@Concurrency@@QAE@XZ
??0_Scoped_lock@_NonReentrantPPLLock@details@Concurrency@@QAE@AAV123@@Z
??0_NonReentrantPPLLock@details@Concurrency@@QAE@XZ
??0bad_target@Concurrency@@QAE@XZ
??0invalid_link_target@Concurrency@@QAE@PBD@Z
?_Trace_agents@Concurrency@@YAXW4Agents_EventType@1@_JZZ
?Free@Concurrency@@YAXPAX@Z
?Alloc@Concurrency@@YAPAXI@Z
?_SpinOnce@?$_SpinWait@$00@details@Concurrency@@QAE_NXZ
??1critical_section@Concurrency@@QAE@XZ

shlwapi

PathRemoveFileSpecW
PathFindExtensionW
ord219

d3d11

D3D11CreateDevice

dxgi

CreateDXGIFactory1

d2d1

ord1

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

vcruntime140

strstr
__RTtypeid
__std_type_info_name
strchr
strrchr
__current_exception
__current_exception_context
__std_type_info_destroy_list
_except_handler4_common
__std_type_info_hash
wcschr
memchr
memset
__RTDynamicCast
memmove
__CxxFrameHandler3
__std_exception_destroy
__std_exception_copy
_purecall
__std_terminate
__std_type_info_compare
_CxxThrowException
memcpy

api-ms-win-crt-runtime-l1-1-0

_errno
abort
_invalid_parameter_noinfo
_set_errno
_invalid_parameter_noinfo_noreturn
_wassert
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit
_initterm
_initterm_e
_beginthreadex
terminate

api-ms-win-crt-string-l1-1-0

_strnicmp
strncpy_s
strnlen
wcspbrk
wcsncmp
tolower
wcscat_s
strncmp
towlower
strtok_s
isalnum

api-ms-win-crt-filesystem-l1-1-0

_wstat64i32
_lock_file
_unlock_file
_wsplitpath_s

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vfprintf
__stdio_common_vsprintf_s
_fseeki64
fgetc
fread
fsetpos
ungetc
__stdio_common_vsscanf
fwrite
__stdio_common_vsprintf
fclose
_wfopen_s
__stdio_common_vsnprintf_s
fflush
fputc
setvbuf
__stdio_common_vswprintf
__stdio_common_vswprintf_s
_get_stream_buffer_pointers
fgetpos
__acrt_iob_func

api-ms-win-crt-math-l1-1-0

fmaxf
modf
lroundf
__libm_sse2_powf
exp2f
_libm_sse2_sqrt_precise
_libm_sse2_pow_precise
fminf
_libm_sse2_log_precise
remainderf
_libm_sse2_cos_precise
_libm_sse2_sin_precise
_libm_sse2_tan_precise
_CIatan2
_libm_sse2_acos_precise
copysignf
_libm_sse2_log10_precise
roundf
_fdclass
_CIfmod
log2f
round
floor
cbrtf
_libm_sse2_exp_precise
_fdsign
ldexp
ceil

api-ms-win-crt-convert-l1-1-0

strtod
strtol
wcstod
wcstof
strtoul
wcstoul
wcstombs_s
wcstol
strtoull
atof
strtoll

api-ms-win-crt-time-l1-1-0

_mktime64
_localtime64
_time64

api-ms-win-crt-heap-l1-1-0

_aligned_free
realloc
_aligned_malloc
malloc
free
_callnewh

api-ms-win-crt-utility-l1-1-0

bsearch

vcomp140

_vcomp_for_static_simple_init
_vcomp_fork
_vcomp_for_static_end

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 3.0MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 143KB - Virtual size: 153KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 177KB - Virtual size: 177KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

84eea3e05695fe5ea01d2c94971188fb

Headers

DLL Characteristics

File Characteristics

Imports

gdi32

bcrypt

crypt32

kernel32

user32

advapi32

shell32

ole32

msvcp140

concrt140

shlwapi

d3d11

dxgi

d2d1

version

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-utility-l1-1-0

vcomp140

Exports

Exports

Sections

.text Size: 3.0MB - Virtual size: 3.0MB

.rdata Size: 1.6MB - Virtual size: 1.6MB

.data Size: 143KB - Virtual size: 153KB

.rsrc Size: 33KB - Virtual size: 33KB

.reloc Size: 177KB - Virtual size: 177KB

.text
Size: 3.0MB - Virtual size: 3.0MB

.rdata
Size: 1.6MB - Virtual size: 1.6MB

.data
Size: 143KB - Virtual size: 153KB

.rsrc
Size: 33KB - Virtual size: 33KB

.reloc
Size: 177KB - Virtual size: 177KB