37f23870290abc134d17e6e3910391e2f4cacef19296551139edea0c32bb41ac

Sharing

Copy URL Twitter E-mail

General

Target

37f23870290abc134d17e6e3910391e2f4cacef19296551139edea0c32bb41ac
Size

4.8MB
MD5

92d350edcb774a1acce3f2ceb2072fe3
SHA1

a93f9cb54a24dd04a0cfc86c0284e0f9ba7cebbf
SHA256

37f23870290abc134d17e6e3910391e2f4cacef19296551139edea0c32bb41ac
SHA512

f1bfa1469d28d762c5757ed7b339dde37d579d1f11898096af6f0871651f6568f08d20e3054859382870796b20340bea765c1ba5a059fd501a7c2d7ae216b77f
SSDEEP

98304:MRQ1wiaSjhcx1MKTjNqtEiM1xdVu5cxN9:MRQaiB/wXdVZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37f23870290abc134d17e6e3910391e2f4cacef19296551139edea0c32bb41ac

Files

37f23870290abc134d17e6e3910391e2f4cacef19296551139edea0c32bb41ac
.dll windows:4 windows x64 arch:x64

eb542d29356c5e5e965ac274d7419686

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

sdl2

SDL_AudioStreamClear
SDL_AudioStreamFlush
SDL_AudioStreamGet
SDL_AudioStreamPut
SDL_BuildAudioCVT
SDL_ClearError
SDL_CloseAudioDevice
SDL_ConvertAudio
SDL_Delay
SDL_Error
SDL_FreeAudioStream
SDL_GetError
SDL_GetHintBoolean
SDL_GetTicks
SDL_InitSubSystem
SDL_LoadFile_RW
SDL_LoadWAV_RW
SDL_LockAudioDevice
SDL_Log
SDL_MixAudioFormat
SDL_NewAudioStream
SDL_OpenAudioDevice
SDL_PauseAudioDevice
SDL_RWFromConstMem
SDL_RWFromFile
SDL_RWclose
SDL_RWread
SDL_RWseek
SDL_RWsize
SDL_RWtell
SDL_ReadBE16
SDL_ReadBE32
SDL_ReadLE32
SDL_SetError
SDL_UnlockAudioDevice
SDL_WasInit
SDL_abs
SDL_atoi
SDL_calloc
SDL_floor
SDL_free
SDL_getenv
SDL_iconv_string
SDL_isdigit
SDL_malloc
SDL_memcmp
SDL_memcpy
SDL_memmove
SDL_memset
SDL_realloc
SDL_snprintf
SDL_strcasecmp
SDL_strchr
SDL_strcmp
SDL_strdup
SDL_strlcpy
SDL_strlen
SDL_strncasecmp
SDL_strncmp
SDL_strrchr
SDL_strtod
SDL_strtokr
SDL_strtol
SDL_strtoll

libgcc_s_seh-1

_Unwind_Resume
__powidf2

kernel32

CloseHandle
CreatePipe
CreateProcessA
DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
QueryPerformanceCounter
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WideCharToMultiByte
lstrcpyA
lstrcpynA

msvcrt

___lc_codepage_func
___mb_cur_max_func
__doserrno
__iob_func
__pioinfo
__setusermatherr
_amsg_exit
_chmod
_close
_errno
_fdopen
_fdopen
_filelengthi64
_fileno
_fileno
_fstat64
_getpid
_initterm
_localtime64
_lock
_lseeki64
_lseek
_open
_open_osfhandle
_read
_setjmp
_setmode
_stat64
_strdup
_stricmp
_unlink
_unlink
_unlock
_utime64
_vsnprintf
_wchmod
_wfopen
_wfreopen
_wopen
_wrename
_write
_write
_wstat64
_wunlink
_wutime64
abort
acos
atan
atoi
calloc
exit
fclose
feof
ferror
fflush
fgetc
fgetpos
fopen
fprintf
fputc
fread
free
frexp
fseek
fsetpos
ftell
fwrite
getc
getenv
isprint
localeconv
log10
longjmp
malloc
memchr
memcmp
memcpy
memmove
memset
printf
qsort
rand
realloc
rename
signal
sprintf
strcat
strchr
strcmp
strcpy
strerror
strlen
strncat
strncmp
strncpy
strrchr
strstr
strtok
tolower
toupper
ungetc
vfprintf
wcslen
wcstombs

user32

wsprintfA

winmm

midiOutPrepareHeader
midiOutSetVolume
midiOutUnprepareHeader
midiStreamClose
midiStreamOpen
midiStreamOut
midiStreamPause
midiStreamProperty
midiStreamRestart
midiStreamStop

libstdc++-6

_ZNKSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE6substrEyy
_ZNKSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE7compareEPKc
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE10_M_replaceEyyPKcy
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE6appendEPKc
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE6assignEPKc
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE9_M_appendEPKcy
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE9_M_assignERKS4_
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE9_M_createERyy
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE9push_backEc
_ZNSt8__detail15_List_node_base11_M_transferEPS0_S1_
_ZNSt8__detail15_List_node_base7_M_hookEPS0_
_ZNSt8__detail15_List_node_base9_M_unhookEv
_ZNSt9bad_allocD1Ev
_ZSt17__throw_bad_allocv
_ZSt18_Rb_tree_decrementPSt18_Rb_tree_node_base
_ZSt18_Rb_tree_incrementPKSt18_Rb_tree_node_base
_ZSt18_Rb_tree_incrementPSt18_Rb_tree_node_base
_ZSt19__throw_logic_errorPKc
_ZSt20__throw_length_errorPKc
_ZSt28_Rb_tree_rebalance_for_erasePSt18_Rb_tree_node_baseRS_
_ZSt29_Rb_tree_insert_and_rebalancebPSt18_Rb_tree_node_baseS0_RS_
_ZSt7nothrow
_ZSt9terminatev
_ZTVN10__cxxabiv117__class_type_infoE
_ZTVN10__cxxabiv120__si_class_type_infoE
_ZTVN10__cxxabiv121__vmi_class_type_infoE
_ZTVSt9bad_alloc
_ZdaPv
_ZdlPv
_ZdlPvRKSt9nothrow_t
_Znay
_Znwy
_ZnwyRKSt9nothrow_t
__cxa_allocate_exception
__cxa_begin_catch
__cxa_end_catch
__cxa_guard_acquire
__cxa_guard_release
__cxa_pure_virtual
__cxa_rethrow
__cxa_throw
__gxx_personality_seh0

Exports

Exports

Mix_ADLMIDI_getAdLibMode
Mix_ADLMIDI_getBankID
Mix_ADLMIDI_getBankNames
Mix_ADLMIDI_getChipsCount
Mix_ADLMIDI_getEmulator
Mix_ADLMIDI_getFullPanStereo
Mix_ADLMIDI_getFullRangeBrightness
Mix_ADLMIDI_getLogarithmicVolumes
Mix_ADLMIDI_getScaleMod
Mix_ADLMIDI_getTotalBanks
Mix_ADLMIDI_getTremolo
Mix_ADLMIDI_getVibrato
Mix_ADLMIDI_getVolumeModel
Mix_ADLMIDI_setAdLibMode
Mix_ADLMIDI_setBankID
Mix_ADLMIDI_setChipsCount
Mix_ADLMIDI_setCustomBankFile
Mix_ADLMIDI_setEmulator
Mix_ADLMIDI_setFullPanStereo
Mix_ADLMIDI_setFullRangeBrightness
Mix_ADLMIDI_setLogarithmicVolumes
Mix_ADLMIDI_setScaleMod
Mix_ADLMIDI_setSetDefaults
Mix_ADLMIDI_setTremolo
Mix_ADLMIDI_setVibrato
Mix_ADLMIDI_setVolumeModel
Mix_AllocateChannels
Mix_ChannelFinished
Mix_CloseAudio
Mix_EachSoundFont
Mix_ExpireChannel
Mix_FadeInChannelTimed
Mix_FadeInChannelTimedVolume
Mix_FadeInMusic
Mix_FadeInMusicPos
Mix_FadeOutChannel
Mix_FadeOutGroup
Mix_FadeOutMusic
Mix_FadeOutMusicStream
Mix_FadingChannel
Mix_FadingMusic
Mix_FadingMusicStream
Mix_FreeChunk
Mix_FreeMixer
Mix_FreeMusic
Mix_GetChunk
Mix_GetChunkDecoder
Mix_GetMidiDevice
Mix_GetMidiPlayer
Mix_GetMusicAlbumTag
Mix_GetMusicArtistTag
Mix_GetMusicCopyrightTag
Mix_GetMusicDecoder
Mix_GetMusicHookData
Mix_GetMusicLoopEndTime
Mix_GetMusicLoopLengthTime
Mix_GetMusicLoopStartTime
Mix_GetMusicMixer
Mix_GetMusicPosition
Mix_GetMusicTempo
Mix_GetMusicTitle
Mix_GetMusicTitleTag
Mix_GetMusicTotalTime
Mix_GetMusicType
Mix_GetNextMidiDevice
Mix_GetNextMidiPlayer
Mix_GetNumChunkDecoders
Mix_GetNumMusicDecoders
Mix_GetSoundFonts
Mix_GetSynchroValue
Mix_GetTimidityCfg
Mix_GetVolumeMusicStream
Mix_GroupAvailable
Mix_GroupChannel
Mix_GroupChannels
Mix_GroupCount
Mix_GroupNewer
Mix_GroupOldest
Mix_HaltChannel
Mix_HaltGroup
Mix_HaltMusic
Mix_HaltMusicStream
Mix_HasChunkDecoder
Mix_HookMusic
Mix_HookMusicFinished
Mix_Init
Mix_InitMixer
Mix_Linked_Version
Mix_LoadMUS
Mix_LoadMUSType_RW
Mix_LoadMUSType_RW_ARG
Mix_LoadMUS_RW
Mix_LoadMUS_RW_ARG
Mix_LoadMUS_RW_GME
Mix_LoadWAV_RW
Mix_MusicDuration
Mix_OPNMIDI_getChipsCount
Mix_OPNMIDI_getEmulator
Mix_OPNMIDI_getFullPanStereo
Mix_OPNMIDI_getFullRangeBrightness
Mix_OPNMIDI_getVolumeModel
Mix_OPNMIDI_setChipsCount
Mix_OPNMIDI_setCustomBankFile
Mix_OPNMIDI_setEmulator
Mix_OPNMIDI_setFullPanStereo
Mix_OPNMIDI_setFullRangeBrightness
Mix_OPNMIDI_setSetDefaults
Mix_OPNMIDI_setVolumeModel
Mix_OpenAudio
Mix_OpenAudioDevice
Mix_Pause
Mix_PauseMusic
Mix_PauseMusicStream
Mix_Paused
Mix_PausedMusic
Mix_PausedMusicStream
Mix_PlayChannelTimed
Mix_PlayChannelTimedVolume
Mix_PlayMusic
Mix_Playing
Mix_PlayingMusic
Mix_PlayingMusicStream
Mix_QuerySpec
Mix_QuickLoad_RAW
Mix_QuickLoad_WAV
Mix_Quit
Mix_RegisterEffect
Mix_ReserveChannels
Mix_Resume
Mix_ResumeMusic
Mix_ResumeMusicStream
Mix_RewindMusic
Mix_RewindMusicStream
Mix_SetDistance
Mix_SetLockMIDIArgs
Mix_SetMidiDevice
Mix_SetMidiPlayer
Mix_SetMusicCMD
Mix_SetMusicPosition
Mix_SetMusicStreamPosition
Mix_SetMusicTempo
Mix_SetPanning
Mix_SetPosition
Mix_SetPostMix
Mix_SetReverseStereo
Mix_SetSoundFonts
Mix_SetSynchroValue
Mix_SetTimidityCfg
Mix_Timidity_addToPathList
Mix_UnregisterAllEffects
Mix_UnregisterEffect
Mix_Volume
Mix_VolumeChunk
Mix_VolumeMusic
Mix_VolumeMusicStream
gme_ay_type
gme_clear_playlist
gme_delete
gme_enable_accuracy
gme_equalizer
gme_free_info
gme_gbs_type
gme_gym_type
gme_hes_type
gme_identify_extension
gme_identify_file
gme_identify_header
gme_ignore_silence
gme_kss_type
gme_load_custom
gme_load_data
gme_load_file
gme_multi_channel
gme_mute_voice
gme_mute_voices
gme_new_emu
gme_new_emu_multi_channel
gme_nsf_type
gme_nsfe_type
gme_open_data
gme_open_file
gme_play
gme_sap_type
gme_seek
gme_seek_samples
gme_set_autoload_playback_limit
gme_set_equalizer
gme_set_fade
gme_set_stereo_depth
gme_set_tempo
gme_set_user_cleanup
gme_set_user_data
gme_spc_type
gme_start_track
gme_tell
gme_tell_samples
gme_track_count
gme_track_ended
gme_track_info
gme_type
gme_type_extension
gme_type_list
gme_type_multitrack
gme_type_system
gme_user_data
gme_vgm_type
gme_vgz_type
gme_voice_count
gme_voice_name
gme_warning
gme_wrong_file_type

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 567KB - Virtual size: 567KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 10KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/4
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/19
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/31
Size: 512B - Virtual size: 329B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/45
Size: 1024B - Virtual size: 546B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/57
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/70
Size: 512B - Virtual size: 155B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

eb542d29356c5e5e965ac274d7419686

Headers

File Characteristics

Imports

sdl2

libgcc_s_seh-1

kernel32

msvcrt

user32

winmm

libstdc++-6

Exports

Exports

Sections

.text Size: 1.6MB - Virtual size: 1.6MB

.data Size: 1.1MB - Virtual size: 1.1MB

.rdata Size: 567KB - Virtual size: 567KB

.pdata Size: 54KB - Virtual size: 54KB

.xdata Size: 69KB - Virtual size: 68KB

.bss Size: - Virtual size: 10KB

.edata Size: 6KB - Virtual size: 6KB

.idata Size: 10KB - Virtual size: 9KB

.CRT Size: 512B - Virtual size: 88B

.tls Size: 512B - Virtual size: 16B

.rsrc Size: 1024B - Virtual size: 1000B

.reloc Size: 6KB - Virtual size: 6KB

/4 Size: 512B - Virtual size: 80B

/19 Size: 8KB - Virtual size: 7KB

/31 Size: 512B - Virtual size: 329B

/45 Size: 1024B - Virtual size: 546B

/57 Size: 512B - Virtual size: 72B

/70 Size: 512B - Virtual size: 155B

.text
Size: 1.6MB - Virtual size: 1.6MB

.data
Size: 1.1MB - Virtual size: 1.1MB

.rdata
Size: 567KB - Virtual size: 567KB

.pdata
Size: 54KB - Virtual size: 54KB

.xdata
Size: 69KB - Virtual size: 68KB

.bss
Size: - Virtual size: 10KB

.edata
Size: 6KB - Virtual size: 6KB

.idata
Size: 10KB - Virtual size: 9KB

.CRT
Size: 512B - Virtual size: 88B

.tls
Size: 512B - Virtual size: 16B

.rsrc
Size: 1024B - Virtual size: 1000B

.reloc
Size: 6KB - Virtual size: 6KB

/4
Size: 512B - Virtual size: 80B

/19
Size: 8KB - Virtual size: 7KB

/31
Size: 512B - Virtual size: 329B

/45
Size: 1024B - Virtual size: 546B

/57
Size: 512B - Virtual size: 72B

/70
Size: 512B - Virtual size: 155B