3d5e6b2c6237aa6c043d29a9cbb88b838201fc72d45cd8113753b6a4f235110d

Sharing

Copy URL Twitter E-mail

General

Target

3d5e6b2c6237aa6c043d29a9cbb88b838201fc72d45cd8113753b6a4f235110d
Size

3.6MB
MD5

e8d92b9d1bce8528d72388a642fb1b8d
SHA1

645cbc33dcf6b37900dc35d0ae4c0c632a1fa29b
SHA256

3d5e6b2c6237aa6c043d29a9cbb88b838201fc72d45cd8113753b6a4f235110d
SHA512

961060215db4014180fe3aeecf24a1d807c94d6b37a9b9fd77f0e33b77c0d4c3a472e9a67d298cea9bbd1977b2eb71b8a060968eaa22357d0730c132b9c88ff3
SSDEEP

49152:6VnUeT65CH8TRb5sQnoD93RqDqCStnv+tw3eEWr1kOlP/o2Cpzij0kC8fO/YncI+:aKAeRa2e98cvWueEWJP0xixLfO6cV9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d5e6b2c6237aa6c043d29a9cbb88b838201fc72d45cd8113753b6a4f235110d

Files

3d5e6b2c6237aa6c043d29a9cbb88b838201fc72d45cd8113753b6a4f235110d
.dll windows:6 windows x64

0f99bb260b8a2a5ae97701741d3263a0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

VirtualProtect
GetCurrentProcess
VirtualAlloc
Sleep
CloseHandle
CreateThread
ReadProcessMemory
GetModuleHandleW
IsBadReadPtr
TerminateProcess
WritePrivateProfileStringA
GetLocalTime
GetCurrentProcessId
GetPrivateProfileIntA
GetPrivateProfileStringA
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
IsDebuggerPresent
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlCaptureContext
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

GetMessageW
ShowWindow
DestroyWindow
MessageBoxW
UpdateWindow
FindWindowA
GetClientRect
GetAsyncKeyState
GetDlgItemTextA
DispatchMessageW
MessageBoxA
TranslateMessage
mouse_event
CreateDialogParamW

msvcp140

?_Xlength_error@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z

d3dx9_43

D3DXVec3Project

ws2_32

WSAStartup
closesocket
htons
recv
connect
socket
send
inet_addr

vcruntime140_1

__CxxFrameHandler4

vcruntime140

memmove
memcpy
memcmp
__std_exception_destroy
__std_exception_copy
__C_specific_handler
_CxxThrowException
memset
__std_type_info_destroy_list
memchr

api-ms-win-crt-runtime-l1-1-0

_initialize_onexit_table
_initterm_e
_initterm
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_invalid_parameter_noinfo_noreturn
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
exit

api-ms-win-crt-convert-l1-1-0

atoi

api-ms-win-crt-heap-l1-1-0

_callnewh
malloc
free

api-ms-win-crt-math-l1-1-0

sqrt

Sections

.text
Size: - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pN@
Size: - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.%8J
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nIS
Size: 3.6MB - Virtual size: 3.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 552B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0f99bb260b8a2a5ae97701741d3263a0

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

msvcp140

d3dx9_43

ws2_32

vcruntime140_1

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

Sections

.text Size: - Virtual size: 22KB

.rdata Size: - Virtual size: 8KB

.data Size: - Virtual size: 2KB

.pdata Size: - Virtual size: 1KB

.pN@ Size: - Virtual size: 1.7MB

.%8J Size: 2KB - Virtual size: 1KB

.nIS Size: 3.6MB - Virtual size: 3.6MB

.reloc Size: 512B - Virtual size: 216B

.rsrc Size: 512B - Virtual size: 552B

.text
Size: - Virtual size: 22KB

.rdata
Size: - Virtual size: 8KB

.data
Size: - Virtual size: 2KB

.pdata
Size: - Virtual size: 1KB

.pN@
Size: - Virtual size: 1.7MB

.%8J
Size: 2KB - Virtual size: 1KB

.nIS
Size: 3.6MB - Virtual size: 3.6MB

.reloc
Size: 512B - Virtual size: 216B

.rsrc
Size: 512B - Virtual size: 552B