3b9518dd1098fb7f9a3171a1d968d11069699d129826b87bc1ff01d08aae5c31

Sharing

Copy URL Twitter E-mail

General

Target

3b9518dd1098fb7f9a3171a1d968d11069699d129826b87bc1ff01d08aae5c31
Size

8.5MB
MD5

09558ae6f1ed7fdbfee9be763385ae24
SHA1

188e80dc3e692c2e2f4e45d74ad1d102fa8fccae
SHA256

3b9518dd1098fb7f9a3171a1d968d11069699d129826b87bc1ff01d08aae5c31
SHA512

777ae3ffad8863f1383244b3c92c6673e5d4918e71d2fc6f2aef02d92f82c3ed6ed6c9fd9120c36263d15a1751e571912e9230c1f1c4acc46f7f1d63037bd810
SSDEEP

196608:d+t4et8WN3BHx3z6gACoQZFFMP7XCpVbQ:d+tht8WN3J9z6gWEF07XCpa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b9518dd1098fb7f9a3171a1d968d11069699d129826b87bc1ff01d08aae5c31

Files

3b9518dd1098fb7f9a3171a1d968d11069699d129826b87bc1ff01d08aae5c31
.exe windows:6 windows x64 arch:x64

ede4657566d79357c592b2dcb93ec1c8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

crypt32

CertFindExtension
CertGetNameStringW
CertFreeCertificateChain
CryptQueryObject
CertAddCertificateContextToStore
CertFreeCertificateChainEngine
CertGetCertificateChain
CryptDecodeObjectEx
CryptStringToBinaryW
CertOpenStore
CertFindCertificateInStore
CertCloseStore
CertEnumCertificatesInStore
CertFreeCertificateContext
CertCreateCertificateChainEngine
PFXImportCertStore

imm32

ImmSetCandidateWindow
ImmNotifyIME
ImmGetCandidateListW
ImmSetCompositionStringW
ImmGetCompositionStringW
ImmAssociateContext
ImmGetIMEFileNameA
ImmGetContext
ImmReleaseContext
ImmSetCompositionWindow

setupapi

SetupDiGetDeviceRegistryPropertyA
SetupDiEnumDeviceInfo
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailA
SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsA

version

GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA

winmm

waveOutGetDevCapsW
timeBeginPeriod
waveOutGetErrorTextW
waveOutOpen
timeEndPeriod
waveOutGetNumDevs
midiStreamStop
waveOutPrepareHeader
waveOutUnprepareHeader
waveOutWrite
waveOutReset
waveInGetNumDevs
waveInGetDevCapsW
waveInOpen
waveInClose
waveInPrepareHeader
waveInUnprepareHeader
waveInAddBuffer
waveInStart
waveInReset
midiStreamOpen
midiStreamClose
midiStreamProperty
midiStreamOut
midiStreamPause
midiStreamRestart
waveOutClose
midiOutSetVolume
midiOutPrepareHeader
midiOutUnprepareHeader

wldap32

ord301
ord219
ord133
ord73
ord208
ord167
ord117
ord46
ord127
ord26
ord27
ord79
ord147
ord14
ord41
ord142
ord216
ord145

ws2_32

WSAGetLastError
send
closesocket
setsockopt
htons
getsockopt
recv
connect
ntohs
socket
getsockname
__WSAFDIsSet
htonl
WSAStartup
WSACleanup
WSAEnumNetworkEvents
WSAEventSelect
WSACreateEvent
WSACloseEvent
sendto
recvfrom
ntohl
inet_ntoa
shutdown
getpeername
WSASetLastError
WSAIoctl
bind
freeaddrinfo
getaddrinfo
gethostname
listen
accept
ioctlsocket
select

kernel32

RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
GetStartupInfoW
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
SetEvent
RtlCaptureContext
CreateSemaphoreW
GetLocaleInfoA
GetSystemPowerStatus
GetModuleHandleExW
CompareStringA
TlsSetValue
TlsGetValue
TlsAlloc
LocalFree
CreateEventW
WaitForSingleObject
ResetEvent
CancelIo
DeviceIoControl
GetOverlappedResult
SetThreadPriority
GetCurrentThread
CreateThread
IsDebuggerPresent
SetEnvironmentVariableA
VirtualQuery
VirtualFree
VirtualAlloc
SetFilePointerEx
ReleaseSemaphore
TryEnterCriticalSection
InitializeCriticalSectionAndSpinCount
Process32Next
Process32First
CreateToolhelp32Snapshot
CreateDirectoryW
GetSystemInfo
GlobalMemoryStatusEx
TerminateProcess
GetConsoleScreenBufferInfo
SetConsoleScreenBufferSize
GetStdHandle
AllocConsole
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
SleepEx
MultiByteToWideChar
WideCharToMultiByte
GetProcAddress
FreeLibrary
WaitForSingleObjectEx
CloseHandle
GetEnvironmentVariableA
Sleep
MoveFileExW
SetLastError
FormatMessageW
GetLastError
GetSystemDirectoryW
QueryPerformanceFrequency
LoadLibraryW
GetModuleHandleW
ReadFile
WaitForMultipleObjects
PeekNamedPipe
GetFileType
QueryPerformanceCounter
GetTickCount
VerSetConditionMask
VerifyVersionInfoW
GetFileSizeEx
CreateFileW
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
GetModuleFileNameA
LoadLibraryExA
FormatMessageA
FindFirstFileW
SetHandleInformation
GetFullPathNameW
FindNextFileW
GetCurrentProcess
WriteFile
CreatePipe
FindClose
GetFileAttributesW
DuplicateHandle
GetLocalTime
SystemTimeToFileTime
CreateProcessW
SetFilePointer
CreateFileA
ActivateActCtx
GetCurrentThreadId
CreateActCtxA
DeactivateActCtx
GetSystemDirectoryA
LoadLibraryA
EnumResourceNamesW
FindFirstFileExW
FindFirstFileA
FindNextFileA
GetCurrentDirectoryA
SetCurrentDirectoryA
RaiseException
SetFileAttributesA
OutputDebugStringW
AttachConsole
GetConsoleMode
WriteConsoleW
ExitProcess
SetErrorMode
GetModuleFileNameW
MulDiv
SetThreadExecutionState

user32

SystemParametersInfoW
SystemParametersInfoA
DrawTextW
GetDlgItem
EndDialog
DialogBoxIndirectParamW
PostThreadMessageW
GetRawInputDeviceList
GetRawInputDeviceInfoA
GetDesktopWindow
SetWindowRgn
MonitorFromWindow
MonitorFromRect
CreateIconFromResource
UnhookWindowsHookEx
GetClipboardData
EmptyClipboard
CloseClipboard
OpenClipboard
TranslateMessage
EnumWindows
PeekMessageW
SetWindowsHookExW
GetParent
SetWindowLongPtrW
GetWindowLongPtrW
SetWindowLongW
PtInRect
IntersectRect
GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
RemovePropW
SetPropW
SetForegroundWindow
SetActiveWindow
GetFocus
SetFocus
FlashWindowEx
SetLayeredWindowAttributes
ShowWindow
CreateWindowExW
RegisterClassW
AttachThreadInput
RegisterRawInputDevices
CreateIconIndirect
CopyImage
LoadCursorW
SetCursorPos
ReleaseCapture
SetCapture
EnumDisplayMonitors
GetMonitorInfoW
MonitorFromPoint
EnumDisplayDevicesW
EnumDisplaySettingsW
ChangeDisplaySettingsExW
ReleaseDC
GetDC
MapVirtualKeyW
ToUnicode
GetKeyboardState
GetKeyboardLayout
IsClipboardFormatAvailable
GetClipboardSequenceNumber
DestroyWindow
CreateWindowExA
RegisterClassExA
UnregisterClassA
UnregisterDeviceNotification
RegisterDeviceNotificationW
GetDoubleClickTime
RegisterWindowMessageA
GetRawInputData
DestroyIcon
CallNextHookEx
GetWindowLongW
IsRectEmpty
ScreenToClient
ClientToScreen
GetClipCursor
ClipCursor
GetCursorPos
SetCursor
AdjustWindowRectEx
GetWindowRect
GetClientRect
GetPropW
ValidateRect
InvalidateRect
GetUpdateRect
GetForegroundWindow
GetMenu
GetSystemMetrics
KillTimer
SetTimer
GetAsyncKeyState
GetKeyState
IsIconic
SetWindowPos
GetClassInfoExW
RegisterClassExW
UnregisterClassW
CallWindowProcW
DefWindowProcW
PostMessageW
GetMessageExtraInfo
GetMessageW
TrackMouseEvent
MessageBoxA
LoadIconW
GetWindowThreadProcessId
SendMessageW
GetActiveWindow
DispatchMessageW
SetClipboardData

gdi32

BitBlt
DeleteDC
DeleteObject
SelectObject
CreateDIBSection
CreateCompatibleBitmap
CreateDCW
GetDeviceCaps
GetDIBits
CreateBitmap
GetICMProfileW
GetDeviceGammaRamp
SetDeviceGammaRamp
CombineRgn
CreateRectRgn
ChoosePixelFormat
DescribePixelFormat
GetTextMetricsW
GetTextExtentPoint32A
CreateFontIndirectW
CreateCompatibleDC
SwapBuffers
SetPixelFormat
GetPixelFormat

advapi32

RegEnumKeyExW
RegCloseKey
CryptReleaseContext
CryptImportKey
CryptEncrypt
CryptAcquireContextW
CryptDestroyKey
CryptGetHashParam
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGenRandom
RegQueryValueExW
RegOpenKeyExW

shell32

SHGetPathFromIDListW
Shell_NotifyIconW
ShellExecuteA
SHGetKnownFolderPath
SHGetFolderPathA
SHFileOperationA
DragQueryFileW
DragFinish
ExtractIconExW
SHGetFolderPathW
DragAcceptFiles
ShellExecuteW
SHBrowseForFolderW

ole32

CLSIDFromString
PropVariantClear
CoCreateInstance
CoInitializeEx
CoUninitialize
CoTaskMemFree

oleaut32

SysFreeString

msvcp140

?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z
?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z
?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ
?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ
?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ
?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z
??0task_continuation_context@Concurrency@@AEAA@XZ
_Mtx_current_owns
_Cnd_unregister_at_thread_exit
_Cnd_init_in_situ
?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z
?_Throw_future_error@std@@YAXAEBVerror_code@1@@Z
?_Throw_Cpp_error@std@@YAXH@Z
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?_Rethrow_future_exception@std@@YAXVexception_ptr@1@@Z
?_Syserror_map@std@@YAPEBDH@Z
_Cnd_timedwait
?__ExceptionPtrToBool@@YA_NPEBX@Z
_Mtx_destroy_in_situ
_Mtx_init_in_situ
_Cnd_register_at_thread_exit
_Cnd_wait
_Cnd_broadcast
_Cnd_destroy_in_situ
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
_Cnd_signal
_Cnd_do_broadcast_at_thread_exit
_Cnd_destroy
_Mtx_init
?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z
?_ReportUnobservedException@details@Concurrency@@YAXXZ
?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z
??0_Locinfo@std@@QEAA@PEBD@Z
??1_Locinfo@std@@QEAA@XZ
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ
?_Incref@facet@locale@std@@UEAAXXZ
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
??0facet@locale@std@@IEAA@_K@Z
??1facet@locale@std@@MEAA@XZ
?tolower@?$ctype@D@std@@QEBADD@Z
?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z
_Xtime_get_ticks
_Strcoll
?id@?$collate@D@std@@2V0locale@2@A
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
_Strxfrm
?__ExceptionPtrCurrentException@@YAXPEAX@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?__ExceptionPtrCreate@@YAXPEAX@Z
?sync_with_stdio@ios_base@std@@SA_N_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
??Bid@locale@std@@QEAA_KXZ
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?id@?$ctype@D@std@@2V0locale@2@A
?uncaught_exception@std@@YA_NXZ
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
_Mtx_unlock
_Mtx_lock
?_Throw_C_error@std@@YAXH@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Xruntime_error@std@@YAXPEBD@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?_BADOFF@std@@3_JB
?_Random_device@std@@YAIXZ
?_Xlength_error@std@@YAXPEBD@Z
?_Xbad_function_call@std@@YAXXZ
?_Xout_of_range@std@@YAXPEBD@Z
?_Xbad_alloc@std@@YAXXZ
_Mtx_trylock
?_Winerror_map@std@@YAHH@Z
?_Winerror_message@std@@YAKKPEADK@Z
?_Xinvalid_argument@std@@YAXPEBD@Z
??0_Locinfo@std@@QEAA@HPEBD@Z
??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@M@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z
_Link
?imbue@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAA?AVlocale@2@AEBV32@@Z
?_New_Locimp@_Locimp@locale@std@@CAPEAV123@_N@Z
_Equivalent
_To_byte
_Thrd_start
_Thrd_id
_Mtx_destroy
_Cnd_init
_Thrd_join
_Thrd_detach
_Query_perf_frequency
_Query_perf_counter
_Last_write_time
_Copy_file
_Unlink
_Rename
_Remove_dir
_To_wide
_Symlink
_Close_dir
_Open_dir
_Lstat
_Make_dir
_Current_get
_Read_dir
_Stat
?_Makeloc@_Locimp@locale@std@@CAPEAV123@AEBV_Locinfo@3@HPEAV123@PEBV23@@Z

iphlpapi

GetAdaptersAddresses

vcruntime140

__RTDynamicCast
memcmp
__intrinsic_setjmp
_CxxThrowException
__vcrt_InitializeCriticalSectionEx
__C_specific_handler
__CxxFrameHandler3
longjmp
memchr
strstr
wcschr
strrchr
strchr
__std_exception_copy
__std_exception_destroy
__std_type_info_compare
__std_terminate
_purecall
memmove

api-ms-win-crt-stdio-l1-1-0

_wfopen
fopen
_lseeki64
fgetc
ftell
fseek
fread
fgets
_write
_read
__stdio_common_vfprintf
__acrt_iob_func
__stdio_common_vsscanf
_close
__stdio_common_vsprintf_s
tmpnam
fputs
fclose
putc
_open_osfhandle
ferror
getc
setvbuf
_pclose
_fseeki64
fwrite
fflush
_ftelli64
freopen
fputc
ungetc
_popen
tmpfile
clearerr
_set_fmode
__stdio_common_vsprintf
_fileno
feof
_open
__p__commode

api-ms-win-crt-runtime-l1-1-0

_c_exit
_exit
_initterm_e
_initterm
_get_narrow_winmain_command_line
_set_app_type
_seh_filter_exe
_cexit
_crt_atexit
exit
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
abort
_configure_narrow_argv
system
_getpid
_set_errno
_errno
terminate
__sys_nerr
strerror
_invalid_parameter_noinfo_noreturn
_register_thread_local_exe_atexit_callback
_beginthreadex
_beginthread

api-ms-win-crt-math-l1-1-0

round
roundf
pow
powf
log10
log
fmodf
_fdtest
modf
fmod
__setusermatherr
floorf
acos
acosf
asin
atan2
_fdopen
ceil
sqrtf
sin
sinf
floor
frexp
log2
ceilf
cos
cosf
sqrt
exp
ldexp
tan

api-ms-win-crt-time-l1-1-0

strftime
_ftime64
_mktime64
_mkgmtime64
clock
_localtime64_s
_localtime64
_time64
_gmtime64_s
_gmtime64
_difftime64

api-ms-win-crt-heap-l1-1-0

_set_new_mode
_free_base
_callnewh
malloc
free
realloc
_malloc_base
calloc

api-ms-win-crt-utility-l1-1-0

qsort
div
lldiv
bsearch
srand
rand

api-ms-win-crt-string-l1-1-0

strncpy
tolower
strpbrk
isblank
wcspbrk
strcspn
isxdigit
isspace
isdigit
_strdup
isalnum
_wcsdup
strcmp
wcsncpy
strspn
toupper
isprint
strcoll
wcsncmp
ispunct
isupper
iscntrl
strncmp
isalpha
isgraph
islower

api-ms-win-crt-convert-l1-1-0

_atoi64
strtod
strtoll
wcstombs
strtol
atoi
strtoul

api-ms-win-crt-filesystem-l1-1-0

_waccess
rename
_rmdir
remove
_access
_stat64i32
_wstat64
_mkdir
_fstat64
_unlink
_stat64

api-ms-win-crt-locale-l1-1-0

_configthreadlocale
setlocale
localeconv

api-ms-win-crt-environment-l1-1-0

getenv
_dupenv_s

Exports

Exports

Mix_AllocateChannels
Mix_ChannelFinished
Mix_CloseAudio
Mix_EachSoundFont
Mix_ExpireChannel
Mix_FadeInChannel
Mix_FadeInChannelTimed
Mix_FadeInMusic
Mix_FadeInMusicPos
Mix_FadeOutChannel
Mix_FadeOutGroup
Mix_FadeOutMusic
Mix_FadingChannel
Mix_FadingMusic
Mix_FreeChunk
Mix_FreeMusic
Mix_GetChunk
Mix_GetChunkDecoder
Mix_GetMusicAlbumTag
Mix_GetMusicArtistTag
Mix_GetMusicCopyrightTag
Mix_GetMusicDecoder
Mix_GetMusicHookData
Mix_GetMusicLoopEndTime
Mix_GetMusicLoopLengthTime
Mix_GetMusicLoopStartTime
Mix_GetMusicPosition
Mix_GetMusicTitle
Mix_GetMusicTitleTag
Mix_GetMusicType
Mix_GetMusicVolume
Mix_GetNumChunkDecoders
Mix_GetNumMusicDecoders
Mix_GetSoundFonts
Mix_GetSynchroValue
Mix_GetTimidityCfg
Mix_GroupAvailable
Mix_GroupChannel
Mix_GroupChannels
Mix_GroupCount
Mix_GroupNewer
Mix_GroupOldest
Mix_HaltChannel
Mix_HaltGroup
Mix_HaltMusic
Mix_HasChunkDecoder
Mix_HasMusicDecoder
Mix_HookMusic
Mix_HookMusicFinished
Mix_Init
Mix_Linked_Version
Mix_LoadMUS
Mix_LoadMUSType_RW
Mix_LoadMUS_RW
Mix_LoadWAV
Mix_LoadWAV_RW
Mix_MasterVolume
Mix_ModMusicJumpToOrder
Mix_MusicDuration
Mix_OpenAudio
Mix_OpenAudioDevice
Mix_Pause
Mix_PauseMusic
Mix_Paused
Mix_PausedMusic
Mix_PlayChannel
Mix_PlayChannelTimed
Mix_PlayMusic
Mix_Playing
Mix_PlayingMusic
Mix_QuerySpec
Mix_QuickLoad_RAW
Mix_QuickLoad_WAV
Mix_Quit
Mix_RegisterEffect
Mix_ReserveChannels
Mix_Resume
Mix_ResumeMusic
Mix_RewindMusic
Mix_SetDistance
Mix_SetMusicCMD
Mix_SetMusicPosition
Mix_SetPanning
Mix_SetPosition
Mix_SetPostMix
Mix_SetSoundFonts
Mix_SetSynchroValue
Mix_SetTimidityCfg
Mix_UnregisterAllEffects
Mix_UnregisterEffect
Mix_Volume
Mix_VolumeChunk
Mix_VolumeMusic
SDL_AddEventWatch
SDL_AddHintCallback
SDL_AddTimer
SDL_AllocFormat
SDL_AllocPalette
SDL_AllocRW
SDL_AtomicAdd
SDL_AtomicCAS
SDL_AtomicCASPtr
SDL_AtomicGet
SDL_AtomicGetPtr
SDL_AtomicLock
SDL_AtomicSet
SDL_AtomicSetPtr
SDL_AtomicTryLock
SDL_AtomicUnlock
SDL_AudioInit
SDL_AudioQuit
SDL_AudioStreamAvailable
SDL_AudioStreamClear
SDL_AudioStreamFlush
SDL_AudioStreamGet
SDL_AudioStreamPut
SDL_BuildAudioCVT
SDL_CalculateGammaRamp
SDL_CaptureMouse
SDL_ClearComposition
SDL_ClearError
SDL_ClearHints
SDL_ClearQueuedAudio
SDL_CloseAudio
SDL_CloseAudioDevice
SDL_ComposeCustomBlendMode
SDL_CondBroadcast
SDL_CondSignal
SDL_CondWait
SDL_CondWaitTimeout
SDL_ConvertAudio
SDL_ConvertPixels
SDL_ConvertSurface
SDL_ConvertSurfaceFormat
SDL_CreateColorCursor
SDL_CreateCond
SDL_CreateCursor
SDL_CreateMutex
SDL_CreateRGBSurface
SDL_CreateRGBSurfaceFrom
SDL_CreateRGBSurfaceWithFormat
SDL_CreateRGBSurfaceWithFormatFrom
SDL_CreateRenderer
SDL_CreateSemaphore
SDL_CreateShapedWindow
SDL_CreateSoftwareRenderer
SDL_CreateSystemCursor
SDL_CreateTexture
SDL_CreateTextureFromSurface
SDL_CreateThread
SDL_CreateThreadWithStackSize
SDL_CreateWindow
SDL_CreateWindowAndRenderer
SDL_CreateWindowFrom
SDL_DXGIGetOutputInfo
SDL_DYNAPI_entry
SDL_DelEventWatch
SDL_DelHintCallback
SDL_Delay
SDL_DequeueAudio
SDL_DestroyCond
SDL_DestroyMutex
SDL_DestroyRenderer
SDL_DestroySemaphore
SDL_DestroyTexture
SDL_DestroyWindow
SDL_DetachThread
SDL_Direct3D9GetAdapterIndex
SDL_DisableScreenSaver
SDL_DuplicateSurface
SDL_EnableScreenSaver
SDL_EncloseFPoints
SDL_EnclosePoints
SDL_Error
SDL_EventState
SDL_FillRect
SDL_FillRects
SDL_FilterEvents
SDL_FlashWindow
SDL_FlushEvent
SDL_FlushEvents
SDL_FreeAudioStream
SDL_FreeCursor
SDL_FreeFormat
SDL_FreePalette
SDL_FreeRW
SDL_FreeSurface
SDL_FreeWAV
SDL_GL_BindTexture
SDL_GL_CreateContext
SDL_GL_DeleteContext
SDL_GL_ExtensionSupported
SDL_GL_GetAttribute
SDL_GL_GetCurrentContext
SDL_GL_GetCurrentWindow
SDL_GL_GetDrawableSize
SDL_GL_GetProcAddress
SDL_GL_GetSwapInterval
SDL_GL_LoadLibrary
SDL_GL_MakeCurrent
SDL_GL_ResetAttributes
SDL_GL_SetAttribute
SDL_GL_SetSwapInterval
SDL_GL_SwapWindow
SDL_GL_UnbindTexture
SDL_GL_UnloadLibrary
SDL_GUIDFromString
SDL_GUIDToString
SDL_GameControllerAddMapping
SDL_GameControllerAddMappingsFromRW
SDL_GameControllerClose
SDL_GameControllerEventState
SDL_GameControllerFromInstanceID
SDL_GameControllerFromPlayerIndex
SDL_GameControllerGetAppleSFSymbolsNameForAxis
SDL_GameControllerGetAppleSFSymbolsNameForButton
SDL_GameControllerGetAttached
SDL_GameControllerGetAxis
SDL_GameControllerGetAxisFromString
SDL_GameControllerGetBindForAxis
SDL_GameControllerGetBindForButton
SDL_GameControllerGetButton
SDL_GameControllerGetButtonFromString
SDL_GameControllerGetFirmwareVersion
SDL_GameControllerGetJoystick
SDL_GameControllerGetNumTouchpadFingers
SDL_GameControllerGetNumTouchpads
SDL_GameControllerGetPlayerIndex
SDL_GameControllerGetProduct
SDL_GameControllerGetProductVersion
SDL_GameControllerGetSensorData
SDL_GameControllerGetSensorDataRate
SDL_GameControllerGetSerial
SDL_GameControllerGetStringForAxis
SDL_GameControllerGetStringForButton
SDL_GameControllerGetTouchpadFinger
SDL_GameControllerGetType
SDL_GameControllerGetVendor
SDL_GameControllerHasAxis
SDL_GameControllerHasButton
SDL_GameControllerHasLED
SDL_GameControllerHasRumble
SDL_GameControllerHasRumbleTriggers
SDL_GameControllerHasSensor
SDL_GameControllerIsSensorEnabled
SDL_GameControllerMapping
SDL_GameControllerMappingForDeviceIndex
SDL_GameControllerMappingForGUID
SDL_GameControllerMappingForIndex
SDL_GameControllerName
SDL_GameControllerNameForIndex
SDL_GameControllerNumMappings
SDL_GameControllerOpen
SDL_GameControllerPath
SDL_GameControllerPathForIndex
SDL_GameControllerRumble
SDL_GameControllerRumbleTriggers
SDL_GameControllerSendEffect
SDL_GameControllerSetLED
SDL_GameControllerSetPlayerIndex
SDL_GameControllerSetSensorEnabled
SDL_GameControllerTypeForIndex
SDL_GameControllerUpdate
SDL_GetAssertionHandler
SDL_GetAssertionReport
SDL_GetAudioDeviceName
SDL_GetAudioDeviceSpec
SDL_GetAudioDeviceStatus
SDL_GetAudioDriver
SDL_GetAudioStatus
SDL_GetBasePath
SDL_GetCPUCacheLineSize
SDL_GetCPUCount
SDL_GetClipRect
SDL_GetClipboardText
SDL_GetClosestDisplayMode
SDL_GetColorKey
SDL_GetCurrentAudioDriver
SDL_GetCurrentDisplayMode
SDL_GetCurrentVideoDriver
SDL_GetCursor
SDL_GetDefaultAssertionHandler
SDL_GetDefaultAudioInfo
SDL_GetDefaultCursor
SDL_GetDesktopDisplayMode
SDL_GetDisplayBounds
SDL_GetDisplayDPI
SDL_GetDisplayMode
SDL_GetDisplayName
SDL_GetDisplayOrientation
SDL_GetDisplayUsableBounds
SDL_GetError
SDL_GetErrorMsg
SDL_GetEventFilter
SDL_GetGlobalMouseState
SDL_GetGrabbedWindow
SDL_GetHint
SDL_GetHintBoolean
SDL_GetKeyFromName
SDL_GetKeyFromScancode
SDL_GetKeyName
SDL_GetKeyboardFocus
SDL_GetKeyboardState
SDL_GetMemoryFunctions
SDL_GetModState
SDL_GetMouseFocus
SDL_GetMouseState
SDL_GetNumAllocations
SDL_GetNumAudioDevices
SDL_GetNumAudioDrivers
SDL_GetNumDisplayModes
SDL_GetNumRenderDrivers
SDL_GetNumTouchDevices
SDL_GetNumTouchFingers
SDL_GetNumVideoDisplays
SDL_GetNumVideoDrivers
SDL_GetOriginalMemoryFunctions
SDL_GetPerformanceCounter
SDL_GetPerformanceFrequency
SDL_GetPixelFormatName
SDL_GetPlatform
SDL_GetPointDisplayIndex
SDL_GetPowerInfo
SDL_GetPrefPath
SDL_GetPreferredLocales
SDL_GetQueuedAudioSize
SDL_GetRGB
SDL_GetRGBA
SDL_GetRectDisplayIndex
SDL_GetRelativeMouseMode
SDL_GetRelativeMouseState
SDL_GetRenderDrawBlendMode
SDL_GetRenderDrawColor
SDL_GetRenderDriverInfo
SDL_GetRenderTarget
SDL_GetRenderer
SDL_GetRendererInfo
SDL_GetRendererOutputSize
SDL_GetRevision
SDL_GetRevisionNumber
SDL_GetScancodeFromKey
SDL_GetScancodeFromName
SDL_GetScancodeName
SDL_GetShapedWindowMode
SDL_GetSurfaceAlphaMod
SDL_GetSurfaceBlendMode
SDL_GetSurfaceColorMod
SDL_GetSystemRAM
SDL_GetTextureAlphaMod
SDL_GetTextureBlendMode
SDL_GetTextureColorMod
SDL_GetTextureScaleMode
SDL_GetTextureUserData
SDL_GetThreadID
SDL_GetThreadName
SDL_GetTicks
SDL_GetTicks64
SDL_GetTouchDevice
SDL_GetTouchDeviceType
SDL_GetTouchFinger
SDL_GetTouchName
SDL_GetVersion
SDL_GetVideoDriver
SDL_GetWindowBordersSize
SDL_GetWindowBrightness
SDL_GetWindowData
SDL_GetWindowDisplayIndex
SDL_GetWindowDisplayMode
SDL_GetWindowFlags
SDL_GetWindowFromID
SDL_GetWindowGammaRamp
SDL_GetWindowGrab
SDL_GetWindowICCProfile
SDL_GetWindowID
SDL_GetWindowKeyboardGrab
SDL_GetWindowMaximumSize
SDL_GetWindowMinimumSize
SDL_GetWindowMouseGrab
SDL_GetWindowMouseRect
SDL_GetWindowOpacity
SDL_GetWindowPixelFormat
SDL_GetWindowPosition
SDL_GetWindowSize
SDL_GetWindowSurface
SDL_GetWindowTitle
SDL_GetWindowWMInfo
SDL_GetYUVConversionMode
SDL_GetYUVConversionModeForResolution
SDL_HapticClose
SDL_HapticDestroyEffect
SDL_HapticEffectSupported
SDL_HapticGetEffectStatus
SDL_HapticIndex
SDL_HapticName
SDL_HapticNewEffect
SDL_HapticNumAxes
SDL_HapticNumEffects
SDL_HapticNumEffectsPlaying
SDL_HapticOpen
SDL_HapticOpenFromJoystick
SDL_HapticOpenFromMouse
SDL_HapticOpened
SDL_HapticPause
SDL_HapticQuery
SDL_HapticRumbleInit
SDL_HapticRumblePlay
SDL_HapticRumbleStop
SDL_HapticRumbleSupported
SDL_HapticRunEffect
SDL_HapticSetAutocenter
SDL_HapticSetGain
SDL_HapticStopAll
SDL_HapticStopEffect
SDL_HapticUnpause
SDL_HapticUpdateEffect
SDL_Has3DNow
SDL_HasARMSIMD
SDL_HasAVX
SDL_HasAVX2
SDL_HasAVX512F
SDL_HasAltiVec
SDL_HasClipboardText
SDL_HasColorKey
SDL_HasEvent
SDL_HasEvents
SDL_HasIntersection
SDL_HasIntersectionF
SDL_HasLASX
SDL_HasLSX
SDL_HasMMX
SDL_HasNEON
SDL_HasRDTSC
SDL_HasSSE
SDL_HasSSE2
SDL_HasSSE3
SDL_HasSSE41
SDL_HasSSE42
SDL_HasScreenKeyboardSupport
SDL_HasSurfaceRLE
SDL_HideWindow
SDL_Init
SDL_InitSubSystem
SDL_IntersectFRect
SDL_IntersectFRectAndLine
SDL_IntersectRect
SDL_IntersectRectAndLine
SDL_IsGameController
SDL_IsScreenKeyboardShown
SDL_IsScreenSaverEnabled
SDL_IsShapedWindow
SDL_IsTablet
SDL_IsTextInputActive
SDL_IsTextInputShown
SDL_JoystickAttachVirtual
SDL_JoystickAttachVirtualEx
SDL_JoystickClose
SDL_JoystickCurrentPowerLevel
SDL_JoystickDetachVirtual
SDL_JoystickEventState
SDL_JoystickFromInstanceID
SDL_JoystickFromPlayerIndex
SDL_JoystickGetAttached
SDL_JoystickGetAxis
SDL_JoystickGetAxisInitialState
SDL_JoystickGetBall
SDL_JoystickGetButton
SDL_JoystickGetDeviceGUID
SDL_JoystickGetDeviceInstanceID
SDL_JoystickGetDevicePlayerIndex
SDL_JoystickGetDeviceProduct
SDL_JoystickGetDeviceProductVersion
SDL_JoystickGetDeviceType
SDL_JoystickGetDeviceVendor
SDL_JoystickGetFirmwareVersion
SDL_JoystickGetGUID
SDL_JoystickGetGUIDFromString
SDL_JoystickGetGUIDString
SDL_JoystickGetHat
SDL_JoystickGetPlayerIndex
SDL_JoystickGetProduct
SDL_JoystickGetProductVersion
SDL_JoystickGetSerial
SDL_JoystickGetType
SDL_JoystickGetVendor
SDL_JoystickHasLED
SDL_JoystickHasRumble
SDL_JoystickHasRumbleTriggers
SDL_JoystickInstanceID
SDL_JoystickIsHaptic
SDL_JoystickIsVirtual
SDL_JoystickName
SDL_JoystickNameForIndex
SDL_JoystickNumAxes
SDL_JoystickNumBalls
SDL_JoystickNumButtons
SDL_JoystickNumHats
SDL_JoystickOpen
SDL_JoystickPath
SDL_JoystickPathForIndex
SDL_JoystickRumble

Sections

.text
Size: 4.6MB - Virtual size: 4.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 145KB - Virtual size: 191KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 218KB - Virtual size: 218KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gfids
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 437B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 373KB - Virtual size: 373KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.bind
Size: 201KB - Virtual size: 201KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ede4657566d79357c592b2dcb93ec1c8

Headers

DLL Characteristics

File Characteristics

Imports

crypt32

imm32

setupapi

version

winmm

wldap32

ws2_32

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

msvcp140

iphlpapi

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-environment-l1-1-0

Exports

Exports

Sections

.text Size: 4.6MB - Virtual size: 4.6MB

.rdata Size: 2.9MB - Virtual size: 2.9MB

.data Size: 145KB - Virtual size: 191KB

.pdata Size: 218KB - Virtual size: 218KB

.gfids Size: 512B - Virtual size: 88B

.tls Size: 512B - Virtual size: 437B

_RDATA Size: 32KB - Virtual size: 31KB

.rsrc Size: 373KB - Virtual size: 373KB

.reloc Size: 25KB - Virtual size: 25KB

.bind Size: 201KB - Virtual size: 201KB

.text
Size: 4.6MB - Virtual size: 4.6MB

.rdata
Size: 2.9MB - Virtual size: 2.9MB

.data
Size: 145KB - Virtual size: 191KB

.pdata
Size: 218KB - Virtual size: 218KB

.gfids
Size: 512B - Virtual size: 88B

.tls
Size: 512B - Virtual size: 437B

_RDATA
Size: 32KB - Virtual size: 31KB

.rsrc
Size: 373KB - Virtual size: 373KB

.reloc
Size: 25KB - Virtual size: 25KB

.bind
Size: 201KB - Virtual size: 201KB