774f68bfc9f59edf23e34fd6c3c15ba22a6137eddaeec550cf842765213e7285

Sharing

Copy URL Twitter E-mail

General

Target

774f68bfc9f59edf23e34fd6c3c15ba22a6137eddaeec550cf842765213e7285
Size

684KB
MD5

6a7747fe3a6b0d5f5ccad767f0b97232
SHA1

ce79ad4b6efabe0c5d0055c913b5707c5479af98
SHA256

774f68bfc9f59edf23e34fd6c3c15ba22a6137eddaeec550cf842765213e7285
SHA512

3826d958fc0ee8fcd443d022aa5e106a6df9b00d0d5b70fe86bf7857dcdefd46b2f95024f647085ce5e3cf9fff25084376040bbbc3aedd4d143e770be0e0c5c5
SSDEEP

12288:8We37nEO5Nc0Da93ZU4jgMcBoOWIKzWBceD3h8l/VLfN/hbtsvZrz8KIBSUexAyJ:8We37nEO5Ncze4jgMcBoOWnWWebh0/Vv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
774f68bfc9f59edf23e34fd6c3c15ba22a6137eddaeec550cf842765213e7285

Files

774f68bfc9f59edf23e34fd6c3c15ba22a6137eddaeec550cf842765213e7285
.dll windows:5 windows x86 arch:x86

22866c3d49f8275121aa4035eaeda1bc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\builds\build-sourcemod-msvc12\windows-1.11\OUTPUT\core\sourcemod.2.tf2\windows-x86\sourcemod.2.tf2.pdb

Imports

kernel32

GetLastError
FreeLibrary
GetProcAddress
LoadLibraryA
FormatMessageA
GetFileAttributesA
WriteConsoleW
SetEndOfFile
ReadConsoleW
ReadFile
HeapSize
CreateFileW
GetConsoleMode
GetConsoleOutputCP
WriteFile
FlushFileBuffers
SetStdHandle
GetStringTypeW
SetFilePointerEx
GetFileSizeEx
CreateDirectoryW
GetProcessHeap
FreeEnvironmentStringsW
GetCurrentThreadId
GetModuleHandleA
LoadLibraryExA
MultiByteToWideChar
WideCharToMultiByte
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
CloseHandle
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwind
RaiseException
InterlockedFlushSList
SetLastError
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
GetDriveTypeW
GetFullPathNameW
SetEnvironmentVariableW
SetCurrentDirectoryW
GetCurrentDirectoryW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapFree
HeapAlloc
GetStdHandle
GetFileType
LCMapStringW
DecodePointer
HeapReAlloc
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW

tier0

AssertValidStringPtr
_AssertValidWritePtr
_AssertValidReadPtr
?ConMsg@@YAXPBDZZ
?ConColorMsg@@YAXABVColor@@PBDZZ
g_VProfCurrentProfile
?OutputReport@CVProfile@@QAEXHPBDH@Z
?Pause@CVProfile@@QAEXXZ
?ExitScope@CVProfile@@QAEXXZ
?EnterScope@CVProfile@@QAEXPBDH0_NH@Z
?Resume@CVProfNode@@QAEXXZ
Warning
GetSpewOutputFunc
SpewOutputFunc
MemFreeScratch
MemAllocScratch
Msg
GetCPUInformation
DevMsg
?DevMsg@@YAXPBDZZ
?Lock@CThreadFastMutex@@ACEXII@Z
g_pMemAlloc
Plat_IsInDebugSession
Error
?DevWarning@@YAXPBDZZ
CommandLine_Tier0
CreateSimpleThread
ReleaseThreadHandle
GetThreadedLoadLibraryFunc
ThreadWaitForObjects

vstdlib

RandomFloat
RandomInt
KeyValuesSystem
RandomSeed

Exports

Exports

CreateInterface
cvar

Sections

.text
Size: 506KB - Virtual size: 506KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 123KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

22866c3d49f8275121aa4035eaeda1bc

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

tier0

vstdlib

Exports

Exports

Sections

.text Size: 506KB - Virtual size: 506KB

.rdata Size: 123KB - Virtual size: 122KB

.data Size: 24KB - Virtual size: 85KB

.rsrc Size: 1024B - Virtual size: 880B

.reloc Size: 29KB - Virtual size: 28KB

.text
Size: 506KB - Virtual size: 506KB

.rdata
Size: 123KB - Virtual size: 122KB

.data
Size: 24KB - Virtual size: 85KB

.rsrc
Size: 1024B - Virtual size: 880B

.reloc
Size: 29KB - Virtual size: 28KB