734e30d747d3e384520ca37e9fbbed2684154ac87323697f98c8b8564a7011f3

Sharing

Copy URL Twitter E-mail

General

Target

734e30d747d3e384520ca37e9fbbed2684154ac87323697f98c8b8564a7011f3
Size

397KB
MD5

6dc3ede0899b458eb448ee839dc03afd
SHA1

e42d2bd22a0608ab8609e13389bd3f6fb7a0fe9b
SHA256

734e30d747d3e384520ca37e9fbbed2684154ac87323697f98c8b8564a7011f3
SHA512

383b4c79d599595c9574fb9f9b4ca785c66fe1644b22d110b1b53db62a1fee8d1409f21ae4da3961ef23cec6855620bfd063a193b3613ae0e2b09314c8328a56
SSDEEP

6144:oOgcma5s7cRKsj7fxOlCfosw0GUEcoA0v/caeyHV5smlfkNDnkFw/3:oOgBaOcRKsj75OlCfosPGUp0M6Imw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
734e30d747d3e384520ca37e9fbbed2684154ac87323697f98c8b8564a7011f3

Files

734e30d747d3e384520ca37e9fbbed2684154ac87323697f98c8b8564a7011f3
.dll regsvr32 windows:6 windows x64 arch:x64

d47ad7671482ec4e2496b3af2db37032

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

ReleaseMutex
SetEvent
CreateSemaphoreA
GetComputerNameA
SetLastError
UnmapViewOfFile
CreateFileMappingA
OpenFileMappingA
MapViewOfFile
SetConsoleTextAttribute
GetStdHandle
WriteFile
GetSystemPowerStatus
MultiByteToWideChar
GetModuleHandleExA
QueryPerformanceFrequency
CreateDirectoryA
QueryPerformanceCounter
WaitForSingleObject
GetExitCodeProcess
GetModuleHandleW
CloseHandle
OpenMutexA
SetEndOfFile
WriteConsoleW
HeapSize
CreateFileW
SetStdHandle
GetProcessHeap
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
CreateMutexA
ReleaseSemaphore
TerminateProcess
GetModuleFileNameA
GetLastError
GetModuleFileNameW
DeleteCriticalSection
Sleep
InitializeCriticalSection
LeaveCriticalSection
FindFirstFileExW
FindClose
HeapReAlloc
ReadConsoleW
ReadFile
GetFileAttributesExW
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
GetTimeZoneInformation
SetFilePointerEx
GetFileSizeEx
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
EnterCriticalSection
LCMapStringW
CompareStringW
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
GetFileType
HeapAlloc
HeapFree
GetModuleHandleExW
ExitProcess
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
InterlockedFlushSList
RaiseException
RtlPcToFileHeader
RtlUnwindEx
CreateThread
GetVersionExW
DisableThreadLibraryCalls
lstrlenW
FreeLibrary
CreateEventW
ResetEvent
InitializeSListHead
GetCurrentThreadId
GetCurrentProcessId
GetStartupInfoW
IsDebuggerPresent
RtlUnwind
IsProcessorFeaturePresent
InitializeCriticalSectionEx
GetSystemTimeAsFileTime
GetProcAddress
EncodePointer
DecodePointer
WideCharToMultiByte
LCMapStringEx
GetStringTypeW
GetCPInfo
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess

user32

WindowFromDC
MessageBoxA
EnumDisplaySettingsW
SetRectEmpty
SetProcessDPIAware

advapi32

RegQueryValueExA
RegSetValueW
RegGetValueA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegSetValueExW
RegOpenKeyExA
RegOpenKeyExW
RegCreateKeyW
RegDeleteKeyW
RegEnumKeyExW

ole32

CoTaskMemFree
StringFromGUID2
CoCreateInstance
CoFreeUnusedLibraries
CoUninitialize
CoTaskMemAlloc
CoInitialize

shlwapi

PathStripPathA
PathFindFileNameA
PathRemoveExtensionA
PathRemoveBackslashA
PathFindExtensionA
PathIsDirectoryA
PathRemoveFileSpecA
PathIsFileSpecA

d3d11

D3D11CreateDevice

dxgi

CreateDXGIFactory1

winmm

timeGetTime
timeEndPeriod
timeGetDevCaps
timeBeginPeriod

gxc_x64

??0Plugin@gxc@@QEAA@XZ
??1Plugin@gxc@@UEAA@XZ
?gen_id@utils@gxc@@YAHXZ
?tracef@Plugin@gxc@@UEAAXPEBDZZ
?get_type@TextureData@gxc@@QEAA?AW4TEXTURE_TYPE@2@XZ
?get_height@TextureData@gxc@@QEAA_KXZ
?get_width@TextureData@gxc@@QEAA_KXZ
?get_data_ptr@Texture@gxc@@QEAAPEAVTextureData@2@XZ
?set_build_info@Plugin@gxc@@IEAAXPEBD@Z
?set_author@Plugin@gxc@@IEAAXPEBD@Z
?set_description@Plugin@gxc@@IEAAXPEBD@Z
?set_name@Plugin@gxc@@IEAAXPEBD@Z
?set_type@Plugin@gxc@@IEAAXW4PLUGIN_TYPE@2@@Z
?set_version@Plugin@gxc@@IEAAXHHH@Z
?stop@Plugin@gxc@@UEAA_NXZ
?start@Plugin@gxc@@UEAA_NXZ
?terminate@Plugin@gxc@@UEAA_NXZ
?initialize@Plugin@gxc@@UEAA_NXZ
?tracef_debug@Plugin@gxc@@UEAAXPEBDZZ
?tracef_error@Plugin@gxc@@UEAAXPEBDZZ
?tracef_warning@Plugin@gxc@@UEAAXPEBDZZ

opengl32

glPixelStorei
glGetTexImage
glTexImage2D
glTexParameterf
glReadBuffer
glDeleteTextures
glTexParameteri
glGetString
glReadPixels
wglGetCurrentDC
glGenTextures
wglGetCurrentContext
glGetIntegerv
glCopyTexSubImage2D
glBindTexture
glDrawBuffer
wglGetProcAddress
glGetError

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
gxc_plugin_create
gxc_plugin_destroy

Sections

.text
Size: 267KB - Virtual size: 267KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 102KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 736B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d47ad7671482ec4e2496b3af2db37032

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

ole32

shlwapi

d3d11

dxgi

winmm

gxc_x64

opengl32

Exports

Exports

Sections

.text Size: 267KB - Virtual size: 267KB

.rdata Size: 102KB - Virtual size: 102KB

.data Size: 6KB - Virtual size: 13KB

.pdata Size: 15KB - Virtual size: 14KB

_RDATA Size: 512B - Virtual size: 500B

.rsrc Size: 1024B - Virtual size: 736B

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 267KB - Virtual size: 267KB

.rdata
Size: 102KB - Virtual size: 102KB

.data
Size: 6KB - Virtual size: 13KB

.pdata
Size: 15KB - Virtual size: 14KB

_RDATA
Size: 512B - Virtual size: 500B

.rsrc
Size: 1024B - Virtual size: 736B

.reloc
Size: 3KB - Virtual size: 3KB