376b9ca96cd68a0663c4baaf3310416d6c41286e2c7b68e59a7ee434c97f97ad

Sharing

Copy URL

Twitter E-mail

General

Target

376b9ca96cd68a0663c4baaf3310416d6c41286e2c7b68e59a7ee434c97f97ad
Size

130KB
MD5

50bdc5fbb135183d91040d4f7baa8a02
SHA1

507ebded16740276daa931a67d38ccd7c8372969
SHA256

376b9ca96cd68a0663c4baaf3310416d6c41286e2c7b68e59a7ee434c97f97ad
SHA512

c7573238b8f00c7d6f3a95bcd0e1c54083f92668a8de6d7d2c085391c4cdce4b329acbea4c678d0d4b89efe622d42c15328dba4af4e932367358387e7207d153
SSDEEP

3072:12lf249aRP1M43p6nfh+F2n/UnEz+/M+FzTkt1+55UY38vGB:wERdMTfAF2/wEIFz4t1+55UY38vY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
376b9ca96cd68a0663c4baaf3310416d6c41286e2c7b68e59a7ee434c97f97ad

Files

376b9ca96cd68a0663c4baaf3310416d6c41286e2c7b68e59a7ee434c97f97ad
.dll windows x86

e7ec48b96cbcf41d66153ee523a2c647

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

obs

bcrash
bfree
gs_effect_update_params
matrix4_transpose
gs_get_effect
matrix4_mul
os_wcs_to_utf8_ptr
os_wcs_to_utf8
get_win_ver
bmemdup
os_utf8_to_wcs
gs_texture_create
gs_matrix_get
shader_parse
shader_sampler_convert
get_shader_param_type
error_data_buildstring
strref_cmp
astrcmp_n
blog
cf_preprocessor_free
cf_preprocessor_init
cf_lexer_free
cf_lexer_init
matrix4_from_matrix3
bmalloc

d3d9

D3DPERF_EndEvent
D3DPERF_BeginEvent

d3d11

D3D11CreateDevice

dxgi

CreateDXGIFactory1

kernel32

InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
LoadLibraryA
GetProcAddress
FreeLibrary
WaitForSingleObject
GetLastError
CloseHandle

user32

GetMonitorInfoW
DisplayConfigGetDeviceInfo
QueryDisplayConfig
GetDisplayConfigBufferSizes
EnumDisplaySettingsW
GetClientRect

msvcp140

?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?uncaught_exception@std@@YA_NXZ
?_Xlength_error@std@@YAXPBD@Z

vcruntime140

_except_handler4_common
__std_type_info_destroy_list
__std_exception_destroy
__current_exception
memmove
memcpy
__current_exception_context
__std_exception_copy
memset
__CxxFrameHandler3
_CxxThrowException
__std_terminate

api-ms-win-crt-runtime-l1-1-0

_register_onexit_function
_initialize_narrow_environment
_crt_atexit
_cexit
_initterm
_initterm_e
_configure_narrow_argv
terminate
_initialize_onexit_table
_execute_onexit_table
_invalid_parameter_noinfo_noreturn
_seh_filter_dll

api-ms-win-crt-convert-l1-1-0

strtol

api-ms-win-crt-string-l1-1-0

isdigit
_stricmp

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf

api-ms-win-crt-math-l1-1-0

ceil

api-ms-win-crt-heap-l1-1-0

_callnewh
_aligned_malloc
_aligned_free

Exports

Exports

device_begin_frame
device_begin_scene
device_blend_function
device_blend_function_separate
device_blend_op
device_clear
device_copy_texture
device_copy_texture_region
device_create
device_cubetexture_create
device_debug_marker_begin
device_debug_marker_end
device_depth_function
device_destroy
device_draw
device_duplicator_create
device_duplicator_get_monitor_index
device_enable_blending
device_enable_color
device_enable_depth_test
device_enable_framebuffer_srgb
device_enable_stencil_test
device_enable_stencil_write
device_end_scene
device_enter_context
device_enum_adapters
device_flush
device_framebuffer_srgb_enabled
device_frustum
device_gdi_texture_available
device_get_cull_mode
device_get_device_obj
device_get_duplicator_monitor_info
device_get_height
device_get_name
device_get_pixel_shader
device_get_render_target
device_get_size
device_get_texture_type
device_get_type
device_get_vertex_shader
device_get_viewport
device_get_width
device_get_zstencil_target
device_indexbuffer_create
device_leave_context
device_load_default_samplerstate
device_load_indexbuffer
device_load_pixelshader
device_load_samplerstate
device_load_swapchain
device_load_texture
device_load_texture_srgb
device_load_vertexbuffer
device_load_vertexshader
device_nv12_available
device_ortho
device_pixelshader_create
device_preprocessor_name
device_present
device_projection_pop
device_projection_push
device_register_loss_callbacks
device_resize
device_samplerstate_create
device_set_cube_render_target
device_set_cull_mode
device_set_render_target
device_set_scissor_rect
device_set_viewport
device_shared_texture_available
device_stage_texture
device_stagesurface_create
device_stagesurface_create_nv12
device_stencil_function
device_stencil_op
device_swapchain_create
device_texture_acquire_sync
device_texture_create
device_texture_create_gdi
device_texture_create_nv12
device_texture_get_shared_handle
device_texture_open_nt_shared
device_texture_open_shared
device_texture_release_sync
device_texture_wrap_obj
device_timer_create
device_timer_range_create
device_unregister_loss_callbacks
device_vertexbuffer_create
device_vertexshader_create
device_voltexture_create
device_zstencil_create
gs_cubetexture_destroy
gs_cubetexture_get_color_format
gs_cubetexture_get_size
gs_duplicator_destroy
gs_duplicator_get_texture
gs_duplicator_update_frame
gs_get_adapter_count
gs_indexbuffer_destroy
gs_indexbuffer_flush
gs_indexbuffer_flush_direct
gs_indexbuffer_get_data
gs_indexbuffer_get_num_indices
gs_indexbuffer_get_type
gs_samplerstate_destroy
gs_shader_destroy
gs_shader_get_num_params
gs_shader_get_param_by_idx
gs_shader_get_param_by_name
gs_shader_get_param_info
gs_shader_get_viewproj_matrix
gs_shader_get_world_matrix
gs_shader_set_bool
gs_shader_set_default
gs_shader_set_float
gs_shader_set_int
gs_shader_set_matrix3
gs_shader_set_matrix4
gs_shader_set_next_sampler
gs_shader_set_texture
gs_shader_set_val
gs_shader_set_vec2
gs_shader_set_vec3
gs_shader_set_vec4
gs_stagesurface_destroy
gs_stagesurface_get_color_format
gs_stagesurface_get_height
gs_stagesurface_get_width
gs_stagesurface_map
gs_stagesurface_unmap
gs_swapchain_destroy
gs_texture_destroy
gs_texture_get_color_format
gs_texture_get_dc
gs_texture_get_height
gs_texture_get_obj
gs_texture_get_width
gs_texture_map
gs_texture_release_dc
gs_texture_unmap
gs_timer_begin
gs_timer_destroy
gs_timer_end
gs_timer_get_data
gs_timer_range_begin
gs_timer_range_destroy
gs_timer_range_end
gs_timer_range_get_data
gs_vertexbuffer_destroy
gs_vertexbuffer_flush
gs_vertexbuffer_flush_direct
gs_vertexbuffer_get_data
gs_voltexture_destroy
gs_voltexture_get_color_format
gs_voltexture_get_depth
gs_voltexture_get_height
gs_voltexture_get_width
gs_zstencil_destroy

Sections

.text
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e7ec48b96cbcf41d66153ee523a2c647

Headers

DLL Characteristics

File Characteristics

Imports

obs

d3d9

d3d11

dxgi

kernel32

user32

msvcp140

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-heap-l1-1-0

Exports

Exports

Sections

.text Size: 92KB - Virtual size: 91KB

.rdata Size: 29KB - Virtual size: 28KB

.data Size: 1KB - Virtual size: 2KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 5KB - Virtual size: 5KB

.text
Size: 92KB - Virtual size: 91KB

.rdata
Size: 29KB - Virtual size: 28KB

.data
Size: 1KB - Virtual size: 2KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 5KB - Virtual size: 5KB