4e49109ddddd2b37b5f659fd8fbfc5bf

Sharing

Copy URL Twitter E-mail

General

Target

4e49109ddddd2b37b5f659fd8fbfc5bf
Size

80KB
MD5

4e49109ddddd2b37b5f659fd8fbfc5bf
SHA1

137f2ddbb043c8cf203a18bdac955713643d3c06
SHA256

0157dfa2a09bedce050d5a43fcdf1bb166db9b3ac9265a9d5159f797927e5d62
SHA512

48da77035fd30068358bd92ea97c7e31b4001cfd8abf0d5fa16ec7de0c612868b6aa1648eb59110c61f5bbaa525a7511a5786b9205922857a4fcc10ac9678e50
SSDEEP

768:9Jo/YG4JR3fhb6V2ITennWjN8GEawCuWToBqj5O/Y32wPos1tsztGI:qYB6VHXjLEawETokjk/Y5rtsQI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4e49109ddddd2b37b5f659fd8fbfc5bf

Files

4e49109ddddd2b37b5f659fd8fbfc5bf
.dll windows:4 windows x86 arch:x86

095d0a67c5ff3ef450aa48fbac89cb86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

orbiter.exe

?oapiLoadMeshGlobal@@YAQAXPBD@Z
??0VESSEL@@QAE@PAXH@Z
?SaveDefaultState@VESSEL@@QBEXPAX@Z
?SetSize@VESSEL@@QBEXN@Z
?SetEmptyMass@VESSEL@@QBEXN@Z
?SetMaxFuelMass@VESSEL@@QBEXN@Z
?SetFuelMass@VESSEL@@QBEXN@Z
?SetISP@VESSEL@@QBEXN@Z
?SetMaxThrust@VESSEL@@QBEXW4ENGINETYPE@@N@Z
?SetPMI@VESSEL@@QBEXABTVECTOR3@@@Z
?SetCrossSections@VESSEL@@QBEXABTVECTOR3@@@Z
?SetCW@VESSEL@@QBEXNNNN@Z
?SetRotDrag@VESSEL@@QBEXABTVECTOR3@@@Z
?SetPitchMomentScale@VESSEL@@QBEXN@Z
?SetBankMomentScale@VESSEL@@QBEXN@Z
?SetLiftCoeffFunc@VESSEL@@QBEXP6ANN@Z@Z
?ClearMeshes@VESSEL@@QBEXXZ
?ClearExhaustRefs@VESSEL@@QBEXXZ
?ClearAttExhaustRefs@VESSEL@@QBEXXZ
?SetTouchdownPoints@VESSEL@@QBEXABTVECTOR3@@00@Z
?AddMesh@VESSEL@@QBEIPAXPBTVECTOR3@@@Z
?AddExhaustRef@VESSEL@@QBEIW4EXHAUSTTYPE@@AATVECTOR3@@NNPAT3@@Z
?SetCameraOffset@VESSEL@@QBEXABTVECTOR3@@@Z

kernel32

FreeEnvironmentStringsA
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
RtlUnwind
InitializeCriticalSection
LoadLibraryA
WriteFile
GetCurrentThreadId
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetProcAddress
GetModuleHandleA
GetLastError
RaiseException
ExitProcess
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
Sleep
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
HeapSize

Exports

Exports

ovcInit
ovcSaveState
ovcSetClassCaps

Sections

.text
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

095d0a67c5ff3ef450aa48fbac89cb86

Headers

File Characteristics

Imports

orbiter.exe

kernel32

Exports

Exports

Sections

.text Size: 44KB - Virtual size: 40KB

.rdata Size: 12KB - Virtual size: 10KB

.data Size: 8KB - Virtual size: 7KB

.rsrc Size: 4KB - Virtual size: 176B

.reloc Size: 8KB - Virtual size: 5KB

.text
Size: 44KB - Virtual size: 40KB

.rdata
Size: 12KB - Virtual size: 10KB

.data
Size: 8KB - Virtual size: 7KB

.rsrc
Size: 4KB - Virtual size: 176B

.reloc
Size: 8KB - Virtual size: 5KB