fc249cce89323d5676432fb84a921f31c9049e8f1141d03f89b6736b78389f51

Sharing

Copy URL

Twitter E-mail

General

Target

fc249cce89323d5676432fb84a921f31c9049e8f1141d03f89b6736b78389f51
Size

1.5MB
MD5

7d2c33308fbeee521f8547e008ef6f7a
SHA1

79def35dea030f1b573308dc1423897b1ede1ed5
SHA256

fc249cce89323d5676432fb84a921f31c9049e8f1141d03f89b6736b78389f51
SHA512

17e6d33f3554d951f3a07d0d29e5a5deb1db622b51f9f354ab61ef4c16a239e6f357150ce15e912273cfca78f931431090e0c76151faae6cbbba315966493cc7
SSDEEP

24576:9xtk0mq4LUiOwLb5JXfV6w4T4FHO2l4HLy9MDNyxL7ia1Lz:98NL7v5JXfj48FuTHNNyRd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc249cce89323d5676432fb84a921f31c9049e8f1141d03f89b6736b78389f51

Files

fc249cce89323d5676432fb84a921f31c9049e8f1141d03f89b6736b78389f51
.dll windows:4 windows x86 arch:x86

aa750f47b7c27d5b728ca0c4fb67193f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleFileNameA
GetStartupInfoA
SetEnvironmentVariableA
GetEnvironmentVariableA
Sleep
CreateMutexA
GetCurrentProcessId
GetCurrentThreadId
CreateThread
GetTickCount
CloseHandle
GetCurrentProcess
GetCommandLineA
FlushFileBuffers
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
SetStdHandle
GetOEMCP
GetACP
GetCPInfo
InterlockedIncrement
InterlockedDecrement
SetFilePointer
HeapReAlloc
WriteFile
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
GetVersionExA
LoadLibraryA
GetProcAddress
GetLastError
VirtualAlloc
VirtualProtect
GetModuleHandleA
RtlUnwind
ExitProcess
TerminateProcess
GetVersion
HeapFree
HeapAlloc
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
FreeEnvironmentStringsA

user32

PeekMessageA
TranslateMessage
DispatchMessageA
DefWindowProcA
KillTimer
BeginPaint
EndPaint
LoadCursorA
RegisterClassA
GetAsyncKeyState
GetSystemMetrics
CreateWindowExA
SetTimer
PostMessageA
IsWindow
SetWindowTextA
GetDlgItem
CreateDialogIndirectParamA
ShowWindow
UpdateWindow
SendMessageA
DestroyWindow
MessageBoxA

gdi32

SelectObject
BitBlt
DeleteObject
CreatePalette
CreateDCA
SelectPalette
RealizePalette
CreateDIBitmap
DeleteDC
CreateCompatibleDC

Exports

Exports

?fnUpdateEnvironment@@YG_NXZ
fnCheckPassword
fnCheckRandomSkybox
fnDisplayAbout
fnDisplayPad
fnDisplayRegistrationMsg3dna
fnDragNDropEnable
fnGet3dnaParamCount
fnGet3dnaParamKeyByIndex
fnGet3dnaParamValByIndex
fnGetAsyncMessage
fnGetBlockText3dna
fnGetCurrentWorld
fnGetGraphicsSettingCount
fnGetGraphicsSettingKeyByIndex
fnGetGraphicsSettingValByIndex
fnGetScreenSaverOptions
fnGetSkyboxSettingCount
fnGetSkyboxSettingKeyByIndex
fnGetSkyboxSettingValByIndex
fnIsRegistered3dna
fnLoadBlockTextFile3dna
fnLogError
fnLogOut
fnMy3dnaxtrasupp
fnSetScreenSaverOptions
fnShowPurchaseDlg
fnSkyboxChooser
fnThemeChooser
fnWorldChooser

Sections

.text
Size: - Virtual size: 200KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text1
Size: 32KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data1
Size: 24KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc1
Size: 8KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.pdata
Size: 380KB - Virtual size: 384KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

aa750f47b7c27d5b728ca0c4fb67193f

Headers

File Characteristics

Imports

kernel32

user32

gdi32

Exports

Exports

Sections

.text Size: - Virtual size: 200KB

.rdata Size: 48KB - Virtual size: 44KB

.data Size: - Virtual size: 1.0MB

.reloc Size: - Virtual size: 24KB

.text1 Size: 32KB - Virtual size: 64KB

.data1 Size: 24KB - Virtual size: 64KB

.reloc1 Size: 8KB - Virtual size: 64KB

.pdata Size: 380KB - Virtual size: 384KB

.rsrc Size: 1.0MB - Virtual size: 1.0MB

.text
Size: - Virtual size: 200KB

.rdata
Size: 48KB - Virtual size: 44KB

.data
Size: - Virtual size: 1.0MB

.reloc
Size: - Virtual size: 24KB

.text1
Size: 32KB - Virtual size: 64KB

.data1
Size: 24KB - Virtual size: 64KB

.reloc1
Size: 8KB - Virtual size: 64KB

.pdata
Size: 380KB - Virtual size: 384KB

.rsrc
Size: 1.0MB - Virtual size: 1.0MB