f0a0d7761cff437cfeac9ea6e7dc581ebab35839544ddac15e8aab707f989144

Sharing

Copy URL

Twitter E-mail

General

Target

f0a0d7761cff437cfeac9ea6e7dc581ebab35839544ddac15e8aab707f989144
Size

14.7MB
MD5

f9561fdf375e83d19280d9e58ff580c0
SHA1

f8d5ae22b282a4f1c3d150c7c4c3f93c3789fcb3
SHA256

f0a0d7761cff437cfeac9ea6e7dc581ebab35839544ddac15e8aab707f989144
SHA512

68b3374ab5c8aa1d877774846d20cfacbe88e911b314760d4b95529ce3657e6798121abca69342726cbab61cea3ad05c4c1adb43a28507471080da174f796d88
SSDEEP

196608:lmVWWLewiLumJOO5gtsrY/50POShQe5ENrOta:l+WNY0WShrOq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f0a0d7761cff437cfeac9ea6e7dc581ebab35839544ddac15e8aab707f989144

Files

f0a0d7761cff437cfeac9ea6e7dc581ebab35839544ddac15e8aab707f989144
.exe windows:5 windows x86

d536551c0945bc1c0f63103eaf42d18d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RegisterWaitForSingleObject
UnregisterWait
FindFirstFileExW
SystemTimeToTzSpecificLocalTime
FreeLibraryAndExitThread
GetVersionExW
VirtualAlloc
VirtualFree
VirtualProtect
InitializeSListHead
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedFlushSList
QueryDepthSList
UnregisterWaitEx
GetFullPathNameW
LoadLibraryW
GlobalFree
DeleteFileA
GetPrivateProfileStringA
lstrlenA
GetCurrentDirectoryA
MoveFileA
GetModuleHandleA
GetModuleFileNameA
FindClose
FindNextFileA
FindFirstFileA
SetFileAttributesA
SetThreadPriority
InitializeCriticalSection
LeaveCriticalSection
GetFileSizeEx
VerifyVersionInfoW
VerSetConditionMask
SleepEx
WaitForMultipleObjects
GetEnvironmentVariableA
WaitForSingleObjectEx
MoveFileExA
FormatMessageW
InitializeCriticalSectionEx
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
GetThreadTimes
QueryPerformanceFrequency
WaitNamedPipeW
SetEndOfFile
SetEnvironmentVariableA
CreateProcessA
EnterCriticalSection
OutputDebugStringW
WriteConsoleW
HeapReAlloc
SetStdHandle
DeleteFileW
GetTimeZoneInformation
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetFileAttributesExW
FlushFileBuffers
CreateDirectoryW
DeleteCriticalSection
WaitForSingleObject
SetEvent
Sleep
GetSystemInfo
GetLastError
ReadProcessMemory
GetCurrentProcess
Module32Next
CloseHandle
Module32First
GetCurrentProcessId
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
GetThreadPriority
SwitchToThread
SignalObjectAndWait
GetExitCodeThread
DuplicateHandle
SetThreadAffinityMask
GetModuleFileNameW
GetOEMCP
GetACP
IsValidCodePage
GetStdHandle
ReadConsoleW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
HeapSize
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
CreateSemaphoreW
GetModuleHandleW
GetStartupInfoW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
CreateEventW
InitializeCriticalSectionAndSpinCount
SetLastError
UnhandledExceptionFilter
FileTimeToSystemTime
PeekNamedPipe
GetFileType
GetFileInformationByHandle
FileTimeToLocalFileTime
AreFileApisANSI
GetModuleHandleExW
ExitProcess
GetCPInfo
LoadLibraryExW
GetCurrentThreadId
GetDriveTypeW
RtlUnwind
RaiseException
GetCommandLineA
GetSystemTimeAsFileTime
ExitThread
CreateThread
HeapFree
HeapAlloc
IsDebuggerPresent
DecodePointer
EncodePointer
GetStringTypeW
CreateFileW
IsProcessorFeaturePresent
GetProcessHeap
HeapValidate
QueryPerformanceCounter
ReleaseSemaphore
GetLocaleInfoA
CompareStringA
WideCharToMultiByte
GetVersionExA
GetSystemDirectoryA
LoadLibraryA
lstrlenW
GlobalUnlock
GlobalLock
GetProcAddress
FreeLibrary
ReadFile
WriteFile
OutputDebugStringA
WinExec
GetCurrentThread
SetUnhandledExceptionFilter
CreateFileA
CreateFileMappingA
UnmapViewOfFile
MapViewOfFile
GetFileSize
CreateDirectoryA
GlobalAlloc
CreateTimerQueue
GetProcessAffinityMask
CreateToolhelp32Snapshot
GetTickCount
GetCurrentDirectoryW
GetExitCodeProcess
MultiByteToWideChar

user32

GetAsyncKeyState
GetCursorPos
ScreenToClient
FindWindowA
LoadIconA
PostQuitMessage
SystemParametersInfoA
GetKeyState
LoadImageA
DestroyCursor
ShowCursor
SetCursor
SetCursorPos
SetCapture
ReleaseCapture
ChangeDisplaySettingsA
ShowWindow
GetCapture
GetSystemMetrics
LoadStringA
SetRect
OffsetRect
InvalidateRect
MessageBoxA
DefWindowProcA
UnregisterClassA
RegisterClassExA
GetDC
CreateWindowExA
IsWindow
DestroyWindow
GetClientRect
MoveWindow
SetFocus
UpdateWindow
FillRect
GetWindowLongA
SetWindowLongA
RegisterClassA
GetMenu
AdjustWindowRectEx
LoadCursorA
GetMessageA
TranslateMessage
DispatchMessageA
GetKeyboardLayoutNameA
GetKeyboardLayout
OpenClipboard
CloseClipboard
GetClipboardData
CharNextW
CharNextExA
CharPrevExA
ReleaseDC
PeekMessageA
ClientToScreen
SetWindowPos

gdi32

GetTextExtentPoint32A
GetStockObject
EnumFontFamiliesExA
CreateFontIndirectA
GetCharABCWidthsFloatW
GetTextExtentPoint32W
SelectObject
SetBkColor
SetTextColor
TextOutW
CreateCompatibleDC
DeleteDC
SetBkMode
CreateDIBSection
TextOutA
StretchBlt
CreateSolidBrush
DeleteObject

shell32

SHGetSpecialFolderPathA
ShellExecuteA

ole32

CoCreateInstance
CoUninitialize
CoGetClassObject
OleInitialize
OleUninitialize
OleSetContainedObject
CoInitializeEx
CoInitialize

winmm

timeGetDevCaps
timeEndPeriod
timeGetTime
timeBeginPeriod

d3d8

Direct3DCreate8

python27

PyErr_SetObject
PyErr_ExceptionMatches
PyErr_Format
PyOS_snprintf
Py_GetVersion
PyObject_Call
PyObject_CallFunctionObjArgs
PyObject_SetItem
PyObject_GetIter
PyNumber_Add
PyNumber_Multiply
PyNumber_Remainder
PySequence_Contains
PyFrame_New
_Py_ZeroStruct
_Py_TrueStruct
PyString_Type
PyTuple_Type
PyList_Type
PyClass_Type
PyExc_ImportError
PyExc_NameError
PyExc_TypeError
_PyThreadState_Current
PyInt_FromSsize_t
PyObject_GetItem
PyNumber_Subtract
PyNumber_Divide
PyInt_AsSsize_t
PyFloat_FromString
PyString_Size
PyTuple_GetSlice
PyFile_WriteObject
PyFile_SoftSpace
PyFile_WriteString
PyErr_GivenExceptionMatches
PyErr_NormalizeException
PySys_GetObject
PyImport_ReloadModule
PyObject_CallMethodObjArgs
PyObject_Size
PyObject_DelItem
PyIter_Next
PyNumber_And
PyNumber_Index
PyNumber_InPlaceAdd
PyNumber_InPlaceSubtract
PySequence_GetSlice
PySequence_Tuple
PyUnicode_Type
PyFloat_Type
PyDict_Type
PyExc_AttributeError
PyObject_Dir
PyUnicodeUCS2_AsUTF8String
PyDict_Items
PyDict_Contains
PyErr_Restore
PyEval_GetBuiltins
PyEval_MergeCompilerFlags
PyNumber_Negative
PyErr_WarnEx
PyInt_FromString
PyNumber_Absolute
PyExc_ZeroDivisionError
PyType_IsSubtype
PyObject_SelfIter
PyObject_GenericGetAttr
PyErr_SetNone
PyErr_WriteUnraisable
PyArg_UnpackTuple
_PyObject_CallFunction_SizeT
_PyObject_CallMethod_SizeT
PyObject_IsInstance
PyInt_Type
PyTraceBack_Type
PyExc_BaseException
PyExc_GeneratorExit
PyDict_Copy
PyList_AsTuple
PyExc_AssertionError
PySequence_GetItem
PyExc_IndexError
PyClassMethod_New
PyDescr_NewClassMethod
PyCFunction_Type
PyMethod_Type
PyLong_FromString
PyNumber_InPlaceMultiply
PyNumber_Xor
PyNumber_Lshift
PyList_Sort
PyDict_Keys
PyDict_Values
PySet_Pop
PySet_Type
PyObject_GC_Del
PyObject_GC_UnTrack
PyObject_GC_Track
_PyObject_GC_New
PyObject_ClearWeakRefs
PyObject_IsTrue
PyObject_SetAttr
PyObject_SetAttrString
PyObject_RichCompare
PyType_Ready
PyMem_Free
PyMem_Realloc
PyMem_Malloc
PyTraceBack_Here
PyMethod_New
PyCFunction_Call
PyDict_GetItem
PyTuple_Pack
PyList_New
PyString_FromString
PyInt_AsLong
PyTuple_GetItem
PyExc_RuntimeError
PyErr_SetString
Py_BuildValue
PyList_Append
Py_InitModule4
PyModule_AddIntConstant
PyTuple_Size
PyDict_GetItemString
PyLong_AsLong
PyLong_FromLongLong
_PyString_Eq
PyString_FromFormat
PyExc_UnboundLocalError
PyUnicodeUCS2_Compare
PyModule_AddStringConstant
PyArg_ParseTuple
PyTuple_New
PyTuple_SetItem
PyDict_New
PyDict_SetItem
PyDict_Size
PyDict_Next
PyErr_Occurred
PyImport_GetModuleDict
PyExc_SystemError
PyLong_AsLongLong
PyImport_ImportModule
PyString_InternFromString
PyObject_GetAttrString
PyObject_GetAttr
PyCallable_Check
PyFloat_AsDouble
PyString_AsString
PyErr_Clear
PyErr_BadArgument
PyErr_Print
PyObject_CallObject
_Py_NoneStruct
PyDict_SetItemString
PyModule_GetDict
PyErr_Fetch
Py_SetProgramName
Py_Initialize
Py_Finalize
PyRun_StringFlags
PyImport_AddModule
PyEval_EvalCode
PyCode_Type
PyUnicodeUCS2_DecodeUTF8
PyInt_FromLong
PyFloat_FromDouble
PyString_FromStringAndSize
PyErr_NoMemory
PyCode_New
PyExc_StopIteration
PyExc_ValueError
PyNumber_Check

devil

ilInit
ilSetPixels
ilTexImage
ilSave
ilShutDown
ilDeleteImages
ilCopyPixels
ilConvertImage
ilGetInteger
ilLoad
ilOriginFunc
ilGenImages
ilBindImage
ilEnable

imm32

ImmGetConversionStatus
ImmNotifyIME
ImmGetOpenStatus
ImmSetConversionStatus
ImmGetCandidateListW
ImmSetCompositionStringW
ImmGetCompositionStringW
ImmAssociateContext
ImmReleaseContext
ImmGetContext
ImmIsIME
ImmGetIMEFileNameA

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

imagehlp

GetTimestampForLoadedLibrary
EnumerateLoadedModules
StackWalk

granny2

_GrannyGetMaterialTextureByType@8
_GrannyFindMatchingMember@16
_GrannyConvertSingleObject@20
_GrannyReadEntireFileFromMemory@8
_GrannyFreeFileSection@8
_GrannyFreeFile@4
_GrannyGetFileInfo@4
_GrannyGetSourceSkeleton@4
_GrannySetModelClock@8
_GrannyFreeCompletedModelControls@4
_GrannySampleModelAnimationsAccelerated@20
_GrannyUpdateModelMatrix@20
_GrannyNewLocalPose@4
_GrannyFreeLocalPose@4
_GrannyGetWorldPoseComposite4x4Array@4
_GrannyInstantiateModel@4
_GrannyFreeModelInstance@4
_GrannyNewMeshBinding@12
_GrannyFreeMeshBinding@4
_GrannyGetMeshBindingToBoneIndices@4
_GrannyFindBoneByName@12
_GrannyNewWorldPose@4
_GrannyFreeWorldPose@4
_GrannyGetWorldPoseComposite4x4@8
_GrannyGetTotalTypeSize@4
_GrannyGetMeshVertexCount@4
_GrannyMeshIsRigid@4
_GrannyGetMeshIndexCount@4
_GrannyFreeControl@4
_GrannyFreeControlOnceUnused@4
_GrannyCompleteControlAt@8
_GrannyControlIsComplete@4
_GrannyFreeControlIfComplete@4
_GrannyGetControlLoopCount@4
_GrannySetControlLoopCount@8
_GrannyGetControlSpeed@4
_GrannySetControlSpeed@8
_GrannyGetControlLocalDuration@4
_GrannySetControlEaseIn@8
_GrannySetControlEaseInCurve@28
_GrannySetControlEaseOut@8
_GrannySetControlEaseOutCurve@28
_GrannyGetControlRawLocalClock@4
_GrannySetControlRawLocalClock@8
_GrannyPlayControlledAnimation@12
_GrannyGetMeshTriangleGroupCount@4
_GrannyGetMeshTriangleGroups@4
_GrannyGetMeshVertexType@4
_GrannyCopyMeshVertices@12
_GrannyGetMeshVertices@4
_GrannyCopyMeshIndices@12
_GrannyNewMeshDeformer@16
_GrannyFreeMeshDeformer@4
_GrannyDeformVertices@24
GrannyPNT332VertexType
_GrannyGetWorldPose4x4@8

mss32

_AIL_decompress_ASI@24
_AIL_decompress_ADPCM@12
_AIL_file_type@8
_AIL_open_digital_driver@16
_AIL_open_stream@12
_AIL_close_digital_driver@4
_AIL_enumerate_3D_providers@12
_AIL_open_3D_provider@4
_AIL_close_3D_provider@4
_AIL_open_3D_listener@4
_AIL_close_3D_listener@4
_AIL_set_3D_position@16
_AIL_set_3D_velocity@20
_AIL_set_3D_orientation@28
_AIL_startup@0
_AIL_shutdown@0
_AIL_set_redist_directory@4
_AIL_close_stream@4
_AIL_start_stream@4
_AIL_pause_stream@8
_AIL_set_stream_volume_levels@12
_AIL_stream_volume_levels@12
_AIL_set_stream_loop_count@8
_AIL_stream_status@4
_AIL_allocate_3D_sample_handle@4
_AIL_WAV_info@8
_AIL_last_error@0
_AIL_allocate_sample_handle@4
_AIL_release_sample_handle@4
_AIL_init_sample@4
_AIL_set_sample_file@12
_AIL_start_sample@4
_AIL_stop_sample@4
_AIL_set_file_callbacks@16
_AIL_file_read@8
_AIL_resume_sample@4
_AIL_end_sample@4
_AIL_set_sample_volume_pan@12
_AIL_set_sample_loop_count@8
_AIL_sample_status@4
_AIL_sample_volume_pan@12
_AIL_auto_update_3D_position@8
_AIL_3D_sample_volume@4
_AIL_3D_sample_status@4
_AIL_set_3D_sample_loop_count@8
_AIL_set_3D_sample_volume@8
_AIL_set_3D_sample_file@8
_AIL_end_3D_sample@4
_AIL_resume_3D_sample@4
_AIL_stop_3D_sample@4
_AIL_start_3D_sample@4
_AIL_release_3D_sample_handle@4
_AIL_mem_free_lock@4

speedtreert

?SetWindStrength@CSpeedTreeRT@@QAEMMMM@Z
?SetNumWindMatrices@CSpeedTreeRT@@SAXI@Z
??0SGeometry@CSpeedTreeRT@@QAE@XZ
??1SGeometry@CSpeedTreeRT@@QAE@XZ
??0STextures@CSpeedTreeRT@@QAE@XZ
??1STextures@CSpeedTreeRT@@QAE@XZ
??0CSpeedTreeRT@@QAE@XZ
??1CSpeedTreeRT@@QAE@XZ
??2CSpeedTreeRT@@SAPAXI@Z
??3CSpeedTreeRT@@SAXPAX@Z
?Compute@CSpeedTreeRT@@QAE_NPBMI_N@Z
?MakeInstance@CSpeedTreeRT@@QAEPAV1@XZ
?LoadTree@CSpeedTreeRT@@QAE_NPBD@Z
?LoadTree@CSpeedTreeRT@@QAE_NPBEI@Z
?SetTreeSize@CSpeedTreeRT@@QAEXMM@Z
?GetTreePosition@CSpeedTreeRT@@QBEPBMXZ
?SetTreePosition@CSpeedTreeRT@@QAEXMMM@Z
?SetBranchLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z
?SetLeafLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z
?SetFrondLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z
?GetBranchMaterial@CSpeedTreeRT@@QBEPBMXZ
?GetLeafMaterial@CSpeedTreeRT@@QBEPBMXZ
?GetFrondMaterial@CSpeedTreeRT@@QBEPBMXZ
?SetLeafRockingState@CSpeedTreeRT@@QAEX_N@Z
?SetNumLeafRockingGroups@CSpeedTreeRT@@QAEXI@Z
?SetLeafWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z
?SetBranchWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z
?SetFrondWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z
?SetLocalMatrices@CSpeedTreeRT@@QAEXII@Z
?ComputeLodLevel@CSpeedTreeRT@@QAEXXZ
?SetLodLevel@CSpeedTreeRT@@QAEXM@Z
?SetDropToBillboard@CSpeedTreeRT@@SAX_N@Z
?SetLodLimits@CSpeedTreeRT@@QAEXMM@Z
?GetNumBranchLodLevels@CSpeedTreeRT@@QBEGXZ
?GetNumLeafLodLevels@CSpeedTreeRT@@QBEGXZ
?GetNumFrondLodLevels@CSpeedTreeRT@@QBEGXZ
?GetGeometry@CSpeedTreeRT@@QAEXAAUSGeometry@1@KFFF@Z
?GetTextures@CSpeedTreeRT@@QBEXAAUSTextures@1@@Z
?SetTextureFlip@CSpeedTreeRT@@SAX_N@Z
?GetCurrentError@CSpeedTreeRT@@SAPBDXZ
?GetBoundingBox@CSpeedTreeRT@@QBEXPAM@Z
?GetCollisionObjectCount@CSpeedTreeRT@@QAEIXZ
?GetCollisionObject@CSpeedTreeRT@@QAEXIAAW4ECollisionObjectType@1@PAM1@Z
?SetLightState@CSpeedTreeRT@@SAXI_N@Z
?SetLightAttributes@CSpeedTreeRT@@SAXIPBM@Z
?SetCamera@CSpeedTreeRT@@SAXPBM0@Z
?SetTime@CSpeedTreeRT@@SAXM@Z

dinput8

DirectInput8Create

ws2_32

getaddrinfo
listen
getsockname
gethostname
freeaddrinfo
ntohs
inet_addr
htons
htonl
WSACleanup
WSAStartup
WSAGetLastError
socket
send
select
recv
ioctlsocket
connect
closesocket
__WSAFDIsSet
bind
accept
WSAIoctl
WSASetLastError
setsockopt
recvfrom
sendto
getpeername
WSAWaitForMultipleEvents
WSAResetEvent
WSAEventSelect
WSAEnumNetworkEvents
WSACreateEvent
WSACloseEvent
getsockopt
gethostbyname

ddraw

DirectDrawCreate

bcrypt

BCryptGenRandom

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyA
RegCreateKeyExW
RegQueryValueExW
RegOpenKeyExW
RegSetValueExW
CryptAcquireContextA
CryptReleaseContext
CryptGenRandom
CryptGetHashParam
CryptCreateHash
CryptHashData
CryptDestroyHash
CryptDestroyKey
CryptImportKey
CryptEncrypt
RegOpenKeyExA

oleaut32

SysFreeString
VariantClear
SysAllocString
VariantInit

crypt32

CertCloseStore
CertEnumCertificatesInStore
CertFindCertificateInStore
CertFreeCertificateContext
CryptStringToBinaryA
PFXImportCertStore
CryptDecodeObjectEx
CertAddCertificateContextToStore
CertFindExtension
CertGetNameStringA
CryptQueryObject
CertCreateCertificateChainEngine
CertFreeCertificateChainEngine
CertGetCertificateChain
CertFreeCertificateChain
CertOpenStore

wldap32

ord26
ord22
ord41
ord50
ord27
ord60
ord211
ord46
ord217
ord143
ord32
ord33
ord35
ord79
ord30
ord200
ord301
ord45

normaliz

IdnToUnicode
IdnToAscii

Exports

Exports

initPrototype
initRootLibCythonizer
initchannel
initcolorInfo
initcomponent
initconsoleModule
initconstInfo
initdebugInfo
initdragon_soul_refine_settings
initemotion
initexception
initgame
initinterfaceModule
initintroCreate
initintroEmpire
initintroLoading
initintroLogin
initintroLogo
initintroSelect
initlocaleInfo
initmouseModule
initmusicInfo
initnetworkModule
initpaginabonusuri
initplayerSettingModule
initserverCommandParser
initserverInfo
initserverinfo1
initstringCommander
initswitchbot
initsystem
inittest_affect
initui
inituiAffectShower
inituiAttachMetin
inituiAuction
inituiAutoban
inituiCandidate
inituiCaptcha
inituiCharacter
inituiChat
inituiCommon
inituiCube
inituiDragonSoul
inituiEquipmentDialog
inituiEx
inituiExchange
inituiGameButton
inituiGameOption
inituiGift
inituiGuild
inituiHelp
inituiInventory
inituiLanguageSystem
inituiMapNameShower
inituiMessenger
inituiMiniMap
inituiNewShop
inituiOption
inituiParty
inituiPhaseCurtain
inituiPickMoney
inituiPlayerGauge
inituiPointReset
inituiPrivateShopBuilder
inituiQuest
inituiRefine
inituiRestart
inituiSafebox
inituiScriptLocale
inituiSelectMusic
inituiShop
inituiSystem
inituiSystemOption
inituiTarget
inituiTaskBar
inituiTip
inituiToolTip
inituiUploadMark
inituiUtils
inituiWeb
inituiWhisper
inituikingdomswar
inituiselectcredentials
inituiselectitem
inituiwarboard
initutils

Sections

.text
Size: 11.5MB - Virtual size: 11.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 762KB - Virtual size: 761KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.3MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d536551c0945bc1c0f63103eaf42d18d

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

ole32

winmm

d3d8

python27

devil

imm32

version

imagehlp

granny2

mss32

speedtreert

dinput8

ws2_32

ddraw

bcrypt

advapi32

oleaut32

crypt32

wldap32

normaliz

Exports

Exports

Sections

.text Size: 11.5MB - Virtual size: 11.5MB

.rdata Size: 762KB - Virtual size: 761KB

.data Size: 1.3MB - Virtual size: 2.0MB

.data1 Size: 2KB - Virtual size: 2KB

.rsrc Size: 45KB - Virtual size: 44KB

.reloc Size: 1.1MB - Virtual size: 1.1MB

.text
Size: 11.5MB - Virtual size: 11.5MB

.rdata
Size: 762KB - Virtual size: 761KB

.data
Size: 1.3MB - Virtual size: 2.0MB

.data1
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 45KB - Virtual size: 44KB

.reloc
Size: 1.1MB - Virtual size: 1.1MB