bb04d143906f8a3f9faa925c2470631b[.]bin

Sharing

Copy URL Twitter E-mail

General

Target

bb04d143906f8a3f9faa925c2470631b.bin
Size

94.9MB
MD5

bb04d143906f8a3f9faa925c2470631b
SHA1

907bff70bee163afc0122c45740ed9f98fbfb606
SHA256

0f047bfe5b28256565e9b67ab490c63dd6fc0b703ca7b7a33a4953c52362a8f8
SHA512

3bf4852fb33522f0823a57d382fb52d51497720ce3007a5c87b9ebca2ebfcc5290ceb8d29d9c4d1534a91270ebf8377a3811dd634b9a774e99706e1d6aba1a8b
SSDEEP

786432:4nWFBJnWFBhGNEZXhQAUPfey/RwypAOev/aLRx4fl:4nWFBJnWFBhGaZXhXUPfBRwievggl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb04d143906f8a3f9faa925c2470631b.bin

Files

bb04d143906f8a3f9faa925c2470631b.bin
.exe windows:6 windows x64 arch:x64

dc8425c0195c5649d748c2282ecb2cce

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

x3daudio1_7

X3DAudioCalculate
X3DAudioInitialize

xapofx1_5

CreateFX

xinput1_3

ord3
ord2

dxgi

CreateDXGIFactory1
CreateDXGIFactory

d3d9

D3DPERF_BeginEvent
D3DPERF_EndEvent

d3d11

D3D11CreateDevice

d3dcompiler_43

D3DDisassemble

user32

GetTouchInputInfo
CloseTouchInputHandle
RegisterTouchWindow
GetCapture
SetCapture
ReleaseCapture
EnableWindow
IsWindowEnabled
GetSystemMenu
SendInput
GetAsyncKeyState
EnableMenuItem
DrawStateW
UpdateWindow
SetActiveWindow
GetRawInputDeviceList
RegisterRawInputDevices
GetRawInputDeviceInfoA
GetRawInputData
GetWindowInfo
EnumDisplayMonitors
GetMonitorInfoW
ChangeDisplaySettingsW
ChangeDisplaySettingsExW
GetWindowDisplayAffinity
SetWindowDisplayAffinity
GetDesktopWindow
GetKeyState
GetProcessWindowStation
GetUserObjectInformationW
EnumDisplayDevicesA
GetFocus
OpenClipboard
TranslateMessage
SetClipboardData
EmptyClipboard
GetKeyboardLayoutNameW
GetActiveWindow
AllowSetForegroundWindow
PeekMessageW
RegisterHotKey
UnregisterHotKey
PostQuitMessage
SetWindowPos
DisableProcessWindowsGhosting
GetKeyboardLayout
MapVirtualKeyW
EnumDisplayDevicesW
GetWindowThreadProcessId
GetTopWindow
ScreenToClient
MonitorFromWindow
MonitorFromRect
MonitorFromPoint
SetFocus
GetClipboardData
IsZoomed
IsIconic
SetWindowPlacement
GetWindowPlacement
FlashWindowEx
SetLayeredWindowAttributes
ShowWindow
DestroyWindow
IsWindow
CreateWindowExW
GetSystemMetrics
DialogBoxParamW
EndDialog
GetDlgItem
SetDlgItemTextW
SystemParametersInfoW
EnumDisplaySettingsW
CreateIconIndirect
LoadImageW
LoadIconW
LoadCursorFromFileW
LoadCursorW
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
GetClassLongPtrW
SetWindowLongW
UnregisterClassW
RegisterClassW
DefWindowProcW
PostMessageW
SendMessageW
DispatchMessageW
GetWindowLongW
ClipCursor
WindowFromPoint
ClientToScreen
GetClipCursor
GetCursorPos
SetCursor
SetCursorPos
ShowCursor
AdjustWindowRectEx
GetClientRect
GetForegroundWindow
GetDC
ReleaseDC
BeginPaint
EndPaint
SetWindowRgn
GetMessageExtraInfo
MessageBoxW
GetWindowRect
SetWindowTextW
SetForegroundWindow
CloseClipboard

ws2_32

WSACleanup
listen
socket
shutdown
send
recvfrom
recv
ioctlsocket
connect
closesocket
ntohs
ntohl
htons
WSAStartup
__WSAFDIsSet
sendto
WSASetLastError
inet_pton
getnameinfo
freeaddrinfo
getaddrinfo
WSAIoctl
setsockopt
WSAGetLastError
gethostname
accept
bind
getpeername
getsockname
getsockopt
htonl
select

advapi32

CryptGetProvParam
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyExW
GetUserNameW
RegEnumValueW
ReportEventW
RegisterEventSourceW
LookupPrivilegeValueA
AdjustTokenPrivileges
OpenProcessToken
DeregisterEventSource
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
AllocateLocallyUniqueId
CryptEnumProvidersW
CryptSignHashW
CryptDestroyHash
CryptCreateHash
CryptDecrypt
CryptExportKey
CryptGetUserKey
RegCloseKey
CryptSetHashParam
CryptDestroyKey
CryptReleaseContext
CryptAcquireContextW

gdi32

CreateDIBSection
SwapBuffers
SetPixelFormat
ChoosePixelFormat
DeleteObject
CreateRoundRectRgn
CreateRectRgn
CreateFontIndirectW
CreateBitmap
GetStockObject
PtInRegion
SelectObject
SetBkColor
SetBkMode
CreateCompatibleDC
TextOutW
GetObjectW
GetDeviceCaps
SetTextAlign
SetTextColor
GetTextExtentPoint32W
DeleteDC

crypt32

CertEnumCertificatesInStore
CertCloseStore
CertGetNameStringW
CertOpenSystemStoreW
CertFreeCertificateContext
CertDuplicateCertificateContext
CertOpenStore
CertFindCertificateInStore
CertGetCertificateContextProperty

wldap32

ord60
ord46
ord301
ord200
ord30
ord79
ord35
ord33
ord32
ord27
ord26
ord22
ord211
ord143
ord41
ord50

normaliz

IdnToAscii

dsound

ord11
ord12
ord1
ord3
ord6
ord8

wininet

InternetCrackUrlW
InternetOpenW
InternetCloseHandle
InternetConnectW
InternetReadFile
HttpOpenRequestW
HttpSendRequestW
HttpQueryInfoW

winmm

timeBeginPeriod
timeEndPeriod
timeGetDevCaps
timeGetTime
waveOutGetNumDevs

kernel32

SuspendThread
OpenThread
GetExitCodeProcess
TerminateProcess
GetProcessTimes
CreateSemaphoreW
ReleaseSemaphore
PeekNamedPipe
SetThreadErrorMode
SetLastError
OutputDebugStringW
GetTempPathW
SetFileTime
SetFilePointer
SetFileAttributesW
SetEndOfFile
RemoveDirectoryW
GetLongPathNameW
GetFullPathNameW
GetFinalPathNameByHandleW
GetFileSizeEx
GetFileAttributesExW
GetDiskFreeSpaceExW
FlushFileBuffers
FindNextFileW
DeleteFileW
CreateDirectoryW
SetCurrentDirectoryW
GetEnvironmentVariableW
VerSetConditionMask
RtlCaptureStackBackTrace
ReadFile
WriteFile
GetOverlappedResult
Thread32Next
GlobalMemoryStatusEx
GetSystemInfo
GetSystemTimeAsFileTime
GetLocalTime
GetVersionExW
GetLogicalProcessorInformationEx
GetNativeSystemInfo
VirtualAlloc
VirtualProtect
VirtualFree
CreateFileMappingW
GetModuleFileNameW
OpenProcess
GetModuleHandleW
GetModuleHandleExW
GetProcAddress
LoadResource
LockResource
SizeofResource
FindResourceW
CreateProcessW
SetEnvironmentVariableW
Thread32First
VirtualQuery
VerifyVersionInfoA
GetSystemDirectoryA
ExpandEnvironmentStringsA
WaitForMultipleObjects
SleepEx
CreateToolhelp32Snapshot
lstrcmpA
LocalAlloc
LoadLibraryExW
GetSystemDirectoryW
CompareFileTime
GetDateFormatEx
GetTimeFormatEx
GetTimeZoneInformation
SystemTimeToTzSpecificLocalTime
ResolveLocaleName
GetCurrencyFormatEx
GetNumberFormatEx
LocaleNameToLCID
LCIDToLocaleName
SetThreadAffinityMask
ReOpenFile
MapViewOfFile
UnmapViewOfFile
FreeLibrary
GetDynamicTimeZoneInformation
GetLocaleInfoEx
GetACP
GetEnvironmentVariableA
VirtualUnlock
GetLargePageMinimum
FlsSetValue
FlsAlloc
MoveFileW
GetComputerNameW
VerifyVersionInfoW
GetSystemPowerStatus
GetUserPreferredUILanguages
GetUserDefaultLocaleName
SetConsoleCtrlHandler
GetConsoleWindow
K32GetProcessMemoryInfo
Process32FirstW
Process32NextW
GetProcessHandleCount
GetVersion
GetModuleHandleA
AllocConsole
FreeConsole
AttachConsole
SleepConditionVariableCS
GetConsoleScreenBufferInfo
GetThreadContext
RtlCaptureContext
WakeConditionVariable
InitializeConditionVariable
InitializeCriticalSectionEx
CreateSemaphoreA
FormatMessageA
ReadConsoleW
ReadConsoleA
SetConsoleMode
GetConsoleMode
ConvertThreadToFiber
ConvertFiberToThread
RtlVirtualUnwind
CreateFiber
DeleteFiber
SwitchToFiber
OutputDebugStringA
TerminateThread
FlushViewOfFile
GetFileSize
GetTickCount64
RtlLookupFunctionEntry
UnhandledExceptionFilter
IsProcessorFeaturePresent
InitializeSListHead
GetStartupInfoW
DebugBreak
GetCurrentDirectoryW
WaitForSingleObjectEx
IsDebuggerPresent
GetProcessHeap
HeapFree
HeapAlloc
InitializeCriticalSectionAndSpinCount
RemoveVectoredExceptionHandler
AddVectoredExceptionHandler
K32GetModuleFileNameExA
K32EnumProcessModules
LoadLibraryA
LoadLibraryExA
GetModuleFileNameA
SetConsoleWindowInfo
SetConsoleTextAttribute
InitializeCriticalSection
SetCriticalSectionSpinCount
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
QueryPerformanceCounter
GetCurrentThreadId
TlsGetValue
TlsSetValue
GetStdHandle
GetCommandLineW
FindClose
FindFirstFileW
GetFileType
GetLastError
SetErrorMode
ReleaseMutex
CreateMutexW
Sleep
LocalFree
WriteConsoleW
AcquireSRWLockShared
ReleaseSRWLockShared
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
TryEnterCriticalSection
InitializeSRWLock
CloseHandle
SetWaitableTimer
CreateWaitableTimerW
LoadLibraryW
FormatMessageW
GetCurrentProcessId
SwitchToThread
QueryPerformanceFrequency
SetEvent
WaitForSingleObject
CreateEventW
GetCurrentThread
ResumeThread
GetSystemTime
FileTimeToSystemTime
SystemTimeToFileTime
MultiByteToWideChar
WideCharToMultiByte
GetComputerNameA
GlobalAlloc
GlobalUnlock
GlobalLock
GetGeoInfoW
GetUserGeoID
TlsAlloc
TlsFree
HeapSetInformation
SetHandleInformation
CreatePipe
CreateFileW
GetFileAttributesW
RaiseException
SetUnhandledExceptionFilter
ResetEvent
GetCurrentProcess
ExitProcess
CreateThread
SetThreadPriority
GetProcessId
SetDllDirectoryW
GetDllDirectoryW
K32EnumProcessModulesEx
K32GetModuleFileNameExW
SetConsoleScreenBufferSize

shell32

CommandLineToArgvW
SHGetFolderPathW
SHGetKnownFolderPath
ShellExecuteW
ShellExecuteExW
SHGetSpecialFolderPathW

ole32

CoInitialize
RegisterDragDrop
StringFromGUID2
CoTaskMemFree
OleInitialize
OleUninitialize
ReleaseStgMedium
CoCreateGuid
IIDFromString
CoTaskMemAlloc
CoCreateInstance
RevokeDragDrop
PropVariantClear
PropVariantCopy
CoUninitialize

oleaut32

SysAllocString
SysFreeString
VariantCopy
SafeArrayCreateVector
SafeArrayPutElement

iphlpapi

GetAdaptersAddresses

setupapi

SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
SetupDiGetClassDevsExW
SetupDiOpenDevRegKey
SetupDiGetDevicePropertyW
SetupDiGetClassDevsA
SetupGetInfDriverStoreLocationW
SetupDiGetClassDevsW
SetupDiGetDeviceInterfaceDetailW
SetupDiEnumDeviceInterfaces
CM_Get_Device_IDW

dwmapi

DwmIsCompositionEnabled
DwmSetWindowAttribute
DwmFlush
DwmGetCompositionTimingInfo

imm32

ImmReleaseContext
ImmGetDescriptionW
ImmGetIMEFileNameW
ImmGetProperty
ImmCreateContext
ImmDestroyContext
ImmGetContext
ImmSetCompositionWindow
ImmAssociateContext
ImmGetCompositionStringW
ImmNotifyIME
ImmSetCandidateWindow

uiautomationcore

UiaHostProviderFromHwnd
UiaRaiseAutomationPropertyChangedEvent
UiaClientsAreListening
UiaReturnRawElementProvider
UiaRaiseAutomationEvent

hid

HidD_GetSerialNumberString
HidD_GetProductString
HidD_GetManufacturerString
HidD_SetFeature
HidD_GetFeature
HidD_FreePreparsedData
HidD_GetPreparsedData
HidD_GetHidGuid
HidD_GetAttributes
HidP_GetValueCaps
HidP_GetCaps

winhttp

WinHttpGetDefaultProxyConfiguration
WinHttpGetIEProxyConfigForCurrentUser

opengl32

wglDeleteContext
wglGetProcAddress
wglGetCurrentDC
wglGetCurrentContext
wglCreateContext
wglMakeCurrent

msvcp140

?_Xlength_error@std@@YAXPEBD@Z
?_Raise_handler@std@@3P6AXAEBVexception@stdext@@@ZEA
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
?_Xout_of_range@std@@YAXPEBD@Z
_Thrd_join
_Thrd_id
_Mtx_init_in_situ
_Mtx_destroy_in_situ
_Mtx_lock
_Mtx_unlock
_Cnd_do_broadcast_at_thread_exit
?_Throw_C_error@std@@YAXH@Z
?_Throw_Cpp_error@std@@YAXH@Z
??Bid@locale@std@@QEAA_KXZ
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?always_noconv@codecvt_base@std@@QEBA_NXZ
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
?_Xbad_function_call@std@@YAXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Xbad_alloc@std@@YAXXZ
?_Xinvalid_argument@std@@YAXPEBD@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@V?$fpos@U_Mbstatet@@@2@@Z
?tellp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?gcount@?$basic_istream@DU?$char_traits@D@std@@@std@@QEBA_JXZ
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@V?$fpos@U_Mbstatet@@@2@@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z
_Thrd_yield
_Thrd_start
_Mtx_init
_Mtx_destroy
_Cnd_init
_Cnd_destroy
_Cnd_wait
_Cnd_signal
_Cnd_init_in_situ
_Cnd_destroy_in_situ
_Cnd_broadcast

sensapi

IsNetworkAlive

bcrypt

BCryptGenRandom

vcruntime140

__intrinsic_setjmp
__current_exception_context
__current_exception
__std_type_info_compare
__RTtypeid
__std_type_info_name
__CxxFrameHandler3
_CxxThrowException
longjmp
__std_exception_destroy
__std_exception_copy
_set_purecall_handler
strrchr
memchr
strchr
memcpy
strstr
__RTDynamicCast
__std_terminate
_purecall
__C_specific_handler
wcsstr
memmove
memset
wcschr
wcsrchr
memcmp

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

_wassert
terminate
__sys_nerr
_beginthreadex
_getpid
_configure_narrow_argv
signal
_initialize_narrow_environment
_initialize_onexit_table
raise
_exit
strerror_s
_register_onexit_function
_endthreadex
_errno
_endthread
_beginthread
_invalid_parameter_noinfo
abort
_invoke_watson
_invalid_parameter_noinfo_noreturn
_crt_atexit
_cexit
_seh_filter_exe
_set_app_type
_get_narrow_winmain_command_line
_initterm
_initterm_e
_set_invalid_parameter_handler
exit
_c_exit
_register_thread_local_exe_atexit_callback
strerror

api-ms-win-crt-utility-l1-1-0

bsearch
qsort
div
rand
srand

api-ms-win-crt-stdio-l1-1-0

ferror
puts
_setmode
_fileno
_open
_close
_write
_read
__acrt_iob_func
__stdio_common_vfwprintf
__p__commode
fgets
fflush
setvbuf
_set_fmode
__stdio_common_vsprintf
__stdio_common_vfprintf
_get_stream_buffer_pointers
fclose
feof
fgetc
fgetpos
fputc
_wfopen
fputs
fread
fsetpos
setbuf
__stdio_common_vsprintf_s
fopen
clearerr
_fseeki64
fwrite
_lseeki64
ungetc
__stdio_common_vsnprintf_s
__stdio_common_vsscanf
fopen_s
__stdio_common_vswprintf
ftell
fseek

api-ms-win-crt-string-l1-1-0

isdigit
iswdigit
isprint
iswlower
iswxdigit
strcmp
iswalnum
wcsncpy_s
isalpha
_wcsnicmp
_wcsicmp
strncpy_s
isxdigit
iswalpha
wcsncmp
strpbrk
isalnum
wcsncpy
isspace
strncat
toupper
iswupper
strncmp
isupper
islower
isgraph
tolower
strtok
strncpy
iswspace
strcpy_s
strnlen
_stricmp
_strdup
_strnicmp
wcscpy_s
strspn
strcspn

api-ms-win-crt-convert-l1-1-0

_strtoui64
atoi
strtoull
_wcstoi64
strtod
atoll
_strtoi64
atof
strtoll
mbstowcs_s
strtol
_wtof
_wcstoui64
wcstod
strtoul
_wtoi64
wcstoul
_wtoi

api-ms-win-crt-math-l1-1-0

atan2
acos
cos
pow
sin
expf
cosf
floorf
sqrt
tanf
atanf
sinf
modf
log
acosf
fmodf
frexp
logf
ceilf
powf
_finite
ldexp
atan2f
truncf
modff
log10f
asinf
_isnan
ceil
__setusermatherr
log10
exp
fmod
sinhf
atan
asin
floor
trunc
sqrtf
_dsign
_fpclass
tan
_dtest
round
exp2

api-ms-win-crt-filesystem-l1-1-0

_stat64
_fstat64
_lock_file
_mkdir
_stat64i32
_fstat64i32
_unlock_file

api-ms-win-crt-heap-l1-1-0

_aligned_free
realloc
_get_heap_handle
_set_new_mode
calloc
free
malloc
_aligned_malloc
_heapchk

api-ms-win-crt-time-l1-1-0

__tzname
clock
__timezone
_gmtime64_s
_gmtime64
_time64
_tzset

api-ms-win-crt-environment-l1-1-0

getenv
_putenv

api-ms-win-crt-conio-l1-1-0

_cputs

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Exports

Exports

AmdPowerXpressRequestHighPerformance
NvOptimusEnablement
agsCheckDriverVersion
agsDeInit
agsDriverExtensionsDX11_BeginUAVOverlap
agsDriverExtensionsDX11_CreateDevice
agsDriverExtensionsDX11_CreateFromDevice
agsDriverExtensionsDX11_Destroy
agsDriverExtensionsDX11_DestroyDevice
agsDriverExtensionsDX11_EndUAVOverlap
agsDriverExtensionsDX11_GetMaxClipRects
agsDriverExtensionsDX11_IASetPrimitiveTopology
agsDriverExtensionsDX11_MultiDrawIndexedInstancedIndirect
agsDriverExtensionsDX11_MultiDrawIndexedInstancedIndirectCountIndirect
agsDriverExtensionsDX11_MultiDrawInstancedIndirect
agsDriverExtensionsDX11_MultiDrawInstancedIndirectCountIndirect
agsDriverExtensionsDX11_NumPendingAsyncCompileJobs
agsDriverExtensionsDX11_SetClipRects
agsDriverExtensionsDX11_SetDepthBounds
agsDriverExtensionsDX11_SetDiskShaderCacheEnabled
agsDriverExtensionsDX11_SetMaxAsyncCompileThreadCount
agsDriverExtensionsDX11_SetViewBroadcastMasks
agsDriverExtensionsDX11_WriteBreadcrumb
agsDriverExtensionsDX12_CreateCommandList
agsDriverExtensionsDX12_CreateDevice
agsDriverExtensionsDX12_CreateFromDevice
agsDriverExtensionsDX12_CreateGraphicsPipelineState
agsDriverExtensionsDX12_Destroy
agsDriverExtensionsDX12_DestroyCommandList
agsDriverExtensionsDX12_DestroyDevice
agsDriverExtensionsDX12_PopMarker
agsDriverExtensionsDX12_PushMarker
agsDriverExtensionsDX12_SetDepthBounds
agsDriverExtensionsDX12_SetMarker
agsInit
agsSetDisplayMode
png_access_version_number
png_benign_error
png_build_grayscale_palette
png_calloc
png_chunk_benign_error
png_chunk_error
png_chunk_warning
png_convert_from_struct_tm
png_convert_from_time_t
png_convert_to_rfc1123
png_create_info_struct
png_create_read_struct
png_create_read_struct_2
png_create_write_struct
png_create_write_struct_2
png_data_freer
png_destroy_info_struct
png_destroy_read_struct
png_destroy_write_struct
png_error
png_free
png_free_data
png_free_default
png_get_IHDR
png_get_PLTE
png_get_bKGD
png_get_bit_depth
png_get_cHRM
png_get_cHRM_fixed
png_get_channels
png_get_chunk_cache_max
png_get_chunk_malloc_max
png_get_color_type
png_get_compression_buffer_size
png_get_compression_type
png_get_copyright
png_get_current_pass_number
png_get_current_row_number
png_get_error_ptr
png_get_filter_type
png_get_gAMA
png_get_gAMA_fixed
png_get_hIST
png_get_header_ver
png_get_header_version
png_get_iCCP
png_get_image_height
png_get_image_width
png_get_int_32
png_get_interlace_type
png_get_io_chunk_name
png_get_io_chunk_type
png_get_io_ptr
png_get_io_state
png_get_libpng_ver
png_get_mem_ptr
png_get_oFFs
png_get_pCAL
png_get_pHYs
png_get_pHYs_dpi
png_get_pixel_aspect_ratio
png_get_pixel_aspect_ratio_fixed
png_get_pixels_per_inch
png_get_pixels_per_meter
png_get_rgb_to_gray_status
png_get_rowbytes
png_get_rows
png_get_sBIT
png_get_sCAL
png_get_sCAL_fixed
png_get_sCAL_s
png_get_sPLT
png_get_sRGB
png_get_signature
png_get_tIME
png_get_tRNS
png_get_text
png_get_uint_16
png_get_uint_31
png_get_uint_32
png_get_unknown_chunks
png_get_user_chunk_ptr
png_get_user_height_max
png_get_user_transform_ptr
png_get_user_width_max
png_get_valid
png_get_x_offset_inches
png_get_x_offset_inches_fixed
png_get_x_offset_microns
png_get_x_offset_pixels
png_get_x_pixels_per_inch
png_get_x_pixels_per_meter
png_get_y_offset_inches
png_get_y_offset_inches_fixed
png_get_y_offset_microns
png_get_y_offset_pixels
png_get_y_pixels_per_inch
png_get_y_pixels_per_meter
png_handle_as_unknown
png_info_init_3
png_init_io
png_longjmp
png_malloc
png_malloc_default
png_malloc_warn
png_permit_mng_features
png_read_end
png_read_image
png_read_info
png_read_png
png_read_row
png_read_rows
png_read_update_info
png_reset_zstream
png_save_int_32
png_save_uint_16
png_save_uint_32
png_set_IHDR
png_set_PLTE
png_set_add_alpha
png_set_bKGD
png_set_background
png_set_background_fixed
png_set_benign_errors
png_set_bgr
png_set_cHRM
png_set_cHRM_fixed
png_set_chunk_cache_max
png_set_chunk_malloc_max
png_set_compression_buffer_size
png_set_compression_level
png_set_compression_mem_level
png_set_compression_method
png_set_compression_strategy
png_set_compression_window_bits
png_set_crc_action
png_set_error_fn
png_set_expand
png_set_expand_16
png_set_expand_gray_1_2_4_to_8
png_set_filler
png_set_filter
png_set_filter_heuristics
png_set_filter_heuristics_fixed
png_set_flush
png_set_gAMA
png_set_gAMA_fixed
png_set_gamma
png_set_gamma_fixed
png_set_gray_to_rgb
png_set_hIST
png_set_iCCP
png_set_interlace_handling
png_set_invalid
png_set_invert_alpha
png_set_invert_mono
png_set_keep_unknown_chunks
png_set_longjmp_fn
png_set_mem_fn
png_set_oFFs
png_set_pCAL
png_set_pHYs
png_set_packing
png_set_packswap
png_set_palette_to_rgb
png_set_quantize
png_set_read_fn
png_set_read_status_fn
png_set_read_user_chunk_fn
png_set_read_user_transform_fn
png_set_rgb_to_gray
png_set_rgb_to_gray_fixed
png_set_rows
png_set_sBIT
png_set_sCAL
png_set_sCAL_fixed
png_set_sCAL_s
png_set_sPLT
png_set_sRGB
png_set_sRGB_gAMA_and_cHRM
png_set_shift
png_set_sig_bytes
png_set_strip_16
png_set_strip_alpha
png_set_swap
png_set_swap_alpha
png_set_tIME
png_set_tRNS
png_set_tRNS_to_alpha
png_set_text
png_set_unknown_chunk_location
png_set_unknown_chunks
png_set_user_limits
png_set_user_transform_info
png_set_write_fn
png_set_write_status_fn
png_set_write_user_transform_fn
png_sig_cmp
png_start_read_image
png_warning
png_write_chunk
png_write_chunk_data
png_write_chunk_end
png_write_chunk_start
png_write_end
png_write_flush
png_write_image
png_write_info
png_write_info_before_PLTE
png_write_png
png_write_row
png_write_rows
png_write_sig
src_callback_new
src_callback_read
src_clone
src_delete
src_error
src_float_to_int_array
src_float_to_short_array
src_get_channels
src_get_description
src_get_name
src_get_version
src_int_to_float_array
src_is_valid_ratio
src_new
src_process
src_reset
src_set_ratio
src_short_to_float_array
src_simple
src_strerror

Sections

.text
Size: 65.3MB - Virtual size: 65.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19.7MB - Virtual size: 19.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3.9MB - Virtual size: 13.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.msvcjmc
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rodata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 157KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 554KB - Virtual size: 553KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.bind
Size: 202KB - Virtual size: 202KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dc8425c0195c5649d748c2282ecb2cce

Headers

DLL Characteristics

File Characteristics

Imports

x3daudio1_7

xapofx1_5

xinput1_3

dxgi

d3d9

d3d11

d3dcompiler_43

user32

ws2_32

advapi32

gdi32

crypt32

wldap32

normaliz

dsound

wininet

winmm

kernel32

shell32

ole32

oleaut32

iphlpapi

setupapi

dwmapi

imm32

uiautomationcore

hid

winhttp

opengl32

msvcp140

sensapi

bcrypt

vcruntime140

vcruntime140_1

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-conio-l1-1-0

api-ms-win-crt-locale-l1-1-0

Exports

Exports

Sections

.text Size: 65.3MB - Virtual size: 65.3MB

.rdata Size: 19.7MB - Virtual size: 19.7MB

.data Size: 3.9MB - Virtual size: 13.3MB

.pdata Size: 3.4MB - Virtual size: 3.4MB

.msvcjmc Size: 512B - Virtual size: 8B

.rodata Size: 4KB - Virtual size: 4KB

_RDATA Size: 157KB - Virtual size: 156KB

.rsrc Size: 554KB - Virtual size: 553KB

.reloc Size: 1.7MB - Virtual size: 1.7MB

.bind Size: 202KB - Virtual size: 202KB

.text
Size: 65.3MB - Virtual size: 65.3MB

.rdata
Size: 19.7MB - Virtual size: 19.7MB

.data
Size: 3.9MB - Virtual size: 13.3MB

.pdata
Size: 3.4MB - Virtual size: 3.4MB

.msvcjmc
Size: 512B - Virtual size: 8B

.rodata
Size: 4KB - Virtual size: 4KB

_RDATA
Size: 157KB - Virtual size: 156KB

.rsrc
Size: 554KB - Virtual size: 553KB

.reloc
Size: 1.7MB - Virtual size: 1.7MB

.bind
Size: 202KB - Virtual size: 202KB