83d5fb7aed21bf752e2de6d64ff096d2388a92750474e372bdbe6f858d63b95e

Sharing

Copy URL Twitter E-mail

General

Target

83d5fb7aed21bf752e2de6d64ff096d2388a92750474e372bdbe6f858d63b95e
Size

262KB
MD5

c4fd5326e7a375575a16a13c86b5a569
SHA1

f17b0b4fd1236ebd4aae464aa7b2b6403d2d2292
SHA256

83d5fb7aed21bf752e2de6d64ff096d2388a92750474e372bdbe6f858d63b95e
SHA512

3311438b6ab57afa0a974298f41b78e54fd3b10521bf7c63c1089a42e5b422d084a85dd412e27cbbd5886996aa7209df8ed31a3f2bbbbf62598da6621d3de46b
SSDEEP

6144:jqaSUTLkBsMBVY/UB77weE1V9pAO+eWc:j3SUTLGsMBVY/UB7BOV9p8c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
83d5fb7aed21bf752e2de6d64ff096d2388a92750474e372bdbe6f858d63b95e

Files

83d5fb7aed21bf752e2de6d64ff096d2388a92750474e372bdbe6f858d63b95e
.dll windows:5 windows x86 arch:x86

f3dbc45ca954fabb62e53c1ce09eb720

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

tier0

Error
?Lock@CThreadFastMutex@@ACEXII@Z
?DevMsg@@YAXPBDZZ
LOG_GENERAL
LoggingSystem_Log
LoggingSystem_IsChannelEnabled
Warning
Plat_IsInDebugSession
Plat_ExitProcess
g_pMemAlloc
WriteMiniDump
Msg

vstdlib

KeyValuesSystem

kernel32

SetLastError
WriteConsoleW
DecodePointer
EnterCriticalSection
LeaveCriticalSection
FreeLibrary
GetProcAddress
ExitProcess
InitializeCriticalSection
DeleteCriticalSection
LoadLibraryA
GetEnvironmentVariableA
LoadLibraryExA
MultiByteToWideChar
WideCharToMultiByte
GetCurrentThreadId
GetCurrentProcessId
GetLastError
CloseHandle
IsProcessorFeaturePresent
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
GetModuleHandleW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
GetCurrentProcess
TerminateProcess
FlushFileBuffers
SetFilePointerEx
GetConsoleMode
GetConsoleCP
WriteFile
SetStdHandle
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
IsValidCodePage
RaiseException
RtlUnwind
InterlockedFlushSList
CreateFileW
EncodePointer
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
GetModuleHandleExW
GetModuleFileNameA
GetACP
GetStdHandle
GetFileType
GetStringTypeW
LCMapStringW
FindClose
FindFirstFileExA
FindNextFileA

Exports

Exports

?g_pFullFileSystem@@3PAVIFileSystem@@A
CreateInterface
NovintAttemptHWND
NovintButtonCount
NovintButtonState
NovintDeviceCount
NovintDisableHWND
NovintGetDeviceID
NovintGetIHaptics
NovintInputActive
NovintPollDevices
cvar

Sections

.text
Size: 184KB - Virtual size: 183KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 58KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f3dbc45ca954fabb62e53c1ce09eb720

Headers

DLL Characteristics

File Characteristics

Imports

tier0

vstdlib

kernel32

Exports

Exports

Sections

.text Size: 184KB - Virtual size: 183KB

.rdata Size: 58KB - Virtual size: 57KB

.data Size: 6KB - Virtual size: 82KB

_RDATA Size: 1KB - Virtual size: 1KB

.reloc Size: 12KB - Virtual size: 11KB

.text
Size: 184KB - Virtual size: 183KB

.rdata
Size: 58KB - Virtual size: 57KB

.data
Size: 6KB - Virtual size: 82KB

_RDATA
Size: 1KB - Virtual size: 1KB

.reloc
Size: 12KB - Virtual size: 11KB