9d0d76cdeda74aa5a1a3f345b74177fe

Sharing

Copy URL Twitter E-mail

General

Target

9d0d76cdeda74aa5a1a3f345b74177fe
Size

1.3MB
MD5

9d0d76cdeda74aa5a1a3f345b74177fe
SHA1

08ae447ad670c37c8a0f7ed99da041820cfbda25
SHA256

9612cdbfbc511c187843a632a53022faef4a29d0ffc8dcaf04334b8db46c3d66
SHA512

a4d9ffebcf2bfcf00267ef06a73fc66f2895dc8788b0825a40c7b6d145dea60cb159599bd2c32f1667291d7c1e0a8da4217e32ef16667e608c7f7fec5584159c
SSDEEP

24576:lraTuMxDdCiwT3+YQCUbATvG/W3wAfv6:lrtMx5IVUaGe3Dfv6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9d0d76cdeda74aa5a1a3f345b74177fe

Files

9d0d76cdeda74aa5a1a3f345b74177fe
.dll windows:5 windows x86 arch:x86

fb8e32c21df6de66bb7c278c0d60d984

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\builds\build-sourcemod-msvc12\windows-1.7\OUTPUT\core\sourcemod.2.csgo\sourcemod.2.csgo.pdb

Imports

kernel32

FreeLibrary
GetProcAddress
GetLastError
FindClose
FormatMessageA
LoadLibraryA
GetFileAttributesA
FindFirstFileA
FindNextFileA
VirtualProtect
GetTickCount
IsBadReadPtr
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetEndOfFile
ReadConsoleW
WriteConsoleW
SetStdHandle
CreateFileW
GetFullPathNameW
PeekNamedPipe
GetFileInformationByHandle
FileTimeToLocalFileTime
OutputDebugStringW
LoadLibraryExW
GetCurrentDirectoryW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
QueryPerformanceCounter
GetModuleFileNameA
SetFilePointerEx
WideCharToMultiByte
MultiByteToWideChar
EncodePointer
DecodePointer
GetStringTypeW
RtlUnwind
GetSystemTimeAsFileTime
RaiseException
HeapFree
HeapAlloc
HeapReAlloc
IsDebuggerPresent
IsProcessorFeaturePresent
GetCommandLineA
GetCurrentThreadId
GetDriveTypeW
SetEnvironmentVariableA
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
ExitProcess
GetModuleHandleExW
AreFileApisANSI
HeapSize
IsValidCodePage
GetACP
GetOEMCP
GetProcessHeap
GetStdHandle
WriteFile
GetModuleFileNameW
GetFileType
FindFirstFileExW
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
CloseHandle
GetTimeZoneInformation
FlushFileBuffers
GetConsoleCP
GetConsoleMode
ReadFile
CreateDirectoryW

tier0

g_VProfCurrentProfile
?OutputReport@CVProfile@@QAEXHPBDH@Z
?Pause@CVProfile@@QAEXXZ
?ExitScope@CVProfile@@QAEXXZ
?EnterScope@CVProfile@@QAEXPBDH0_NH@Z
?ExitScope@CVProfNode@@QAE_NXZ
?EnterScope@CVProfNode@@QAEXXZ
?Resume@CVProfNode@@QAEXXZ
Warning
LoggingSystem_PopLoggingState
LoggingSystem_PushLoggingState
LoggingSystem_RegisterLoggingListener
Plat_FloatTime
g_pMemAlloc
MemFreeScratch
MemAllocScratch
DevMsg
?DevMsg@@YAXPBDZZ
_AssertValidStringPtr
_AssertValidWritePtr
_AssertValidReadPtr

vstdlib

KeyValuesSystem

Exports

Exports

CreateInterface

Sections

.text
Size: 998KB - Virtual size: 998KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 241KB - Virtual size: 241KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fb8e32c21df6de66bb7c278c0d60d984

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

tier0

vstdlib

Exports

Exports

Sections

.text Size: 998KB - Virtual size: 998KB

.rdata Size: 241KB - Virtual size: 241KB

.data Size: 22KB - Virtual size: 91KB

.rsrc Size: 1024B - Virtual size: 880B

.reloc Size: 60KB - Virtual size: 60KB

.text
Size: 998KB - Virtual size: 998KB

.rdata
Size: 241KB - Virtual size: 241KB

.data
Size: 22KB - Virtual size: 91KB

.rsrc
Size: 1024B - Virtual size: 880B

.reloc
Size: 60KB - Virtual size: 60KB