1339c59101578153ef9ada672e7bface

Sharing

Copy URL Twitter E-mail

General

Target

1339c59101578153ef9ada672e7bface
Size

535KB
MD5

1339c59101578153ef9ada672e7bface
SHA1

11318ccead9c7211536fe93c594326c976f5df76
SHA256

e7ae9e5be5bdd1297ddc5536efa7b09abb91b139fb1b864b901d4315dddbf3f8
SHA512

97e4fe362a68aab799022a00b546e5a4116cea2e6d9233101c49f20599f7e4bf3ae3728664f2b62560580e61b87e1aea5b50b9e66b5c8ab528a84b3c058f1881
SSDEEP

12288:JsGg6HYfGEQnqF44U19KL8KPu6BLZdzh+GeNIUnvozDF:qzQnqF44UXvKPhvxh+ZNIUnvozDF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1339c59101578153ef9ada672e7bface

Files

1339c59101578153ef9ada672e7bface
.exe windows:4 windows x86 arch:x86

3fef3501aacba4c4bf1806d7d4c7de34

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

imm32

ImmGetCompositionStringA
ImmGetCompositionStringW
ImmGetContext
ImmGetDescriptionA
ImmGetOpenStatus
ImmNotifyIME
ImmReleaseContext
ImmSetOpenStatus

sdl_image

IMG_Load

sdl

SDL_ConvertSurface
SDL_CreateCursor
SDL_CreateRGBSurface
SDL_CreateThread
SDL_EnableKeyRepeat
SDL_EnableUNICODE
SDL_FillRect
SDL_FreeCursor
SDL_FreeSurface
SDL_GetAppState
SDL_GetError
SDL_GetKeyState
SDL_GetMouseState
SDL_GetTicks
SDL_GetWMInfo
SDL_Init
SDL_KillThread
SDL_ListModes
SDL_LoadBMP_RW
SDL_LockAudio
SDL_PollEvent
SDL_PushEvent
SDL_Quit
SDL_RWFromConstMem
SDL_RWFromFile
SDL_SetCursor
SDL_SetError
SDL_SetModuleHandle
SDL_SetVideoMode
SDL_ShowCursor
SDL_UnlockAudio
SDL_UpdateRect
SDL_UpperBlit
SDL_WM_GrabInput
SDL_WM_SetCaption
SDL_WM_SetIcon
SDL_WaitThread
SDL_WarpMouse
SDL_strlcat
SDL_strlcpy

sdl_mixer

Mix_CloseAudio
Mix_OpenAudio
Mix_AllocateChannels
Mix_PlayingMusic
Mix_FreeMusic
Mix_Playing
Mix_FreeChunk
Mix_Volume
Mix_QuickLoad_RAW
Mix_LoadWAV_RW
Mix_LoadMUS
Mix_VolumeMusic
Mix_GetMusicType
Mix_HaltMusic
Mix_HaltChannel
Mix_RewindMusic
Mix_SetMusicPosition
Mix_SetPosition
Mix_ResumeMusic
Mix_PlayMusic
Mix_Resume
Mix_PlayChannelTimed
Mix_PauseMusic
Mix_Pause
Mix_HookMusic

sdl_net

SDLNet_CheckSockets
SDLNet_TCP_Recv
SDLNet_DelSocket
SDLNet_FreeSocketSet
SDLNet_TCP_Close
SDLNet_TCP_Send
SDLNet_Init
SDLNet_ResolveHost
SDLNet_TCP_GetPeerAddress
SDLNet_TCP_Open
SDLNet_TCP_Accept
SDLNet_AllocSocketSet
SDLNet_AddSocket

sdl_ttf

TTF_OpenFont
TTF_FontHeight
TTF_CloseFont
TTF_SetFontStyle
TTF_FontFaceIsFixedWidth
TTF_RenderUNICODE_Solid
TTF_RenderUNICODE_Shaded
TTF_RenderUTF8_Shaded
TTF_Quit
TTF_Init

gdi32

BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
CreateDCA
DeleteDC
DeleteObject
EndDoc
EndPage
GetDIBits
GetDeviceCaps
SelectObject
SetDIBitsToDevice
SetPixel
StartDocA
StartPage
TextOutA

kernel32

AllocConsole
ClearCommError
CloseHandle
CreateFileA
CreateProcessA
DeleteCriticalSection
DeleteFileA
EnterCriticalSection
FindFirstFileA
FindNextFileA
FreeConsole
FreeLibrary
GetCommState
GetCommandLineA
GetCurrentDirectoryA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDiskFreeSpaceExA
GetFileSize
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetShortPathNameA
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
GlobalAlloc
GlobalLock
GlobalUnlock
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
LockFile
MultiByteToWideChar
QueryPerformanceCounter
ReadFile
SetCommState
SetCommTimeouts
SetFilePointer
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
UnlockFile
VirtualProtect
VirtualQuery
WaitForSingleObject
WinExec
WriteFile
lstrlenA

msvcrt

_chdir
_mkdir
_putenv
_rmdir
__dllonexit
__getmainargs
__initenv
__lconv_init
__mb_cur_max
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_environ
_errno
_fmode
_initterm
_iob
_isctype
_lock
_lrotl
_onexit
_pctype
_unlock
_winmajor
abort
atan2
calloc
ceil
cos
exit
exp
fclose
fgetc
floor
fopen
fprintf
free
freopen
frexp
fwrite
getenv
isprint
ldexp
localtime
log
malloc
memchr
memcmp
memcpy
memmove
memset
realloc
remove
rename
setbuf
setvbuf
signal
sin
sprintf
sqrt
sscanf
strlen
strncpy
strrchr
system
time
vfprintf

user32

CallWindowProcA
CloseClipboard
EmptyClipboard
GetClientRect
GetClipboardData
GetDC
GetDesktopWindow
GetKeyState
GetKeyboardLayout
GetWindowLongA
GetWindowRect
IsClipboardFormatAvailable
MessageBoxA
OpenClipboard
ReleaseDC
SendInput
SetClipboardData
SetWindowLongA
SetWindowPos
ShowWindow
TranslateMessage
VkKeyScanA

winspool.drv

GetDefaultPrinterA

libgcc_s_sjlj-1

_Unwind_SjLj_Register
_Unwind_SjLj_Resume
_Unwind_SjLj_Unregister
__divdi3
__moddi3

libstdc++-6

_ZNKSi6gcountEv
_ZNSi4readEPci
_ZNSi5seekgExSt12_Ios_Seekdir
_ZNSi5tellgEv
_ZNSo5writeEPKci
_ZNSt14basic_ifstreamIcSt11char_traitsIcEE4openEPKcSt13_Ios_Openmode
_ZNSt14basic_ifstreamIcSt11char_traitsIcEE5closeEv
_ZNSt14basic_ifstreamIcSt11char_traitsIcEE7is_openEv
_ZNSt14basic_ifstreamIcSt11char_traitsIcEEC1Ev
_ZNSt14basic_ifstreamIcSt11char_traitsIcEED1Ev
_ZNSt14basic_ofstreamIcSt11char_traitsIcEE4openEPKcSt13_Ios_Openmode
_ZNSt14basic_ofstreamIcSt11char_traitsIcEE5closeEv
_ZNSt14basic_ofstreamIcSt11char_traitsIcEE7is_openEv
_ZNSt14basic_ofstreamIcSt11char_traitsIcEEC1Ev
_ZNSt14basic_ofstreamIcSt11char_traitsIcEED1Ev
_ZNSt8ios_base4InitC1Ev
_ZNSt8ios_base4InitD1Ev
__cxa_guard_abort
__cxa_guard_acquire
__cxa_guard_release
__gxx_personality_sj0

Exports

Exports

InputMethod_GetCurrentChar
InputMethod_GetCurrentCompositionLength
InputMethod_GetCurrentCompositionPosition
InputMethod_GetCurrentCursorPosition
InputMethod_GetCurrentEditingString
InputMethod_GetCurrentMessage
InputMethod_GetEventNumber
InputMethod_GetInputMethodName
InputMethod_Init
InputMethod_InitFromOther
InputMethod_Invalidate
InputMethod_MoveNextEvent
InputMethod_PostEvent
InputMethod_Quit
InputMethod_Reset
InputMethod_Validate
SDL_Delay

Sections

.text
Size: 386KB - Virtual size: 386KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 5.6MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 681B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3fef3501aacba4c4bf1806d7d4c7de34

Headers

File Characteristics

Imports

imm32

sdl_image

sdl

sdl_mixer

sdl_net

sdl_ttf

gdi32

kernel32

msvcrt

user32

winspool.drv

libgcc_s_sjlj-1

libstdc++-6

Exports

Exports

Sections

.text Size: 386KB - Virtual size: 386KB

.data Size: 2KB - Virtual size: 2KB

.rdata Size: 80KB - Virtual size: 79KB

.bss Size: - Virtual size: 5.6MB

.edata Size: 1024B - Virtual size: 681B

.idata Size: 9KB - Virtual size: 8KB

.CRT Size: 512B - Virtual size: 52B

.tls Size: 512B - Virtual size: 32B

.reloc Size: 54KB - Virtual size: 54KB

.text
Size: 386KB - Virtual size: 386KB

.data
Size: 2KB - Virtual size: 2KB

.rdata
Size: 80KB - Virtual size: 79KB

.bss
Size: - Virtual size: 5.6MB

.edata
Size: 1024B - Virtual size: 681B

.idata
Size: 9KB - Virtual size: 8KB

.CRT
Size: 512B - Virtual size: 52B

.tls
Size: 512B - Virtual size: 32B

.reloc
Size: 54KB - Virtual size: 54KB