efc0d5a0fb3c900319846f92928ae9f114ff04222e3727fd9fdeef514deef4de

Sharing

Copy URL Twitter E-mail

General

Target

efc0d5a0fb3c900319846f92928ae9f114ff04222e3727fd9fdeef514deef4de
Size

1.1MB
MD5

954122bad0e787cfe6bcee0fdc1ad9ab
SHA1

5372f22b1c76ec9442c5dcf17ac6a2d7493b12cd
SHA256

efc0d5a0fb3c900319846f92928ae9f114ff04222e3727fd9fdeef514deef4de
SHA512

17f3a442cf896ba44dcae083e7c59cd7e2ee3ec2428beef8778a81aac777357ab478eacc239789945ce1edaab589281931bef1ea2536d25073b02375f7c00d6f
SSDEEP

24576:St7NhctXTPw5GUKVTVa1t+vh6bq6jLAMCdzx7m9IkE67o+RezSc6gs2jaZrvCZjl:KctM0K+vhaq6jLAMkzx7UIkTTgs38shW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
efc0d5a0fb3c900319846f92928ae9f114ff04222e3727fd9fdeef514deef4de

Files

efc0d5a0fb3c900319846f92928ae9f114ff04222e3727fd9fdeef514deef4de
.exe windows:4 windows x86 arch:x86

563816c5c2c988a0cbc9bf468e49cad2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

comdlg32

CommDlgExtendedError
GetOpenFileNameA
GetOpenFileNameW
GetSaveFileNameA
GetSaveFileNameW

gdi32

BitBlt
CreateCompatibleDC
CreateDIBSection
DeleteObject
GetDeviceCaps
SelectObject

imagehlp

StackWalk
SymFunctionTableAccess
SymGetModuleBase
SymGetModuleInfo
SymGetSymFromAddr
SymInitialize

kernel32

CloseHandle
CreateDirectoryA
CreateDirectoryW
CreateEventA
CreateFileA
CreateFileW
CreateProcessA
CreateProcessW
CreateThread
DeleteCriticalSection
DeleteFileW
EnterCriticalSection
ExitProcess
FindClose
FindFirstFileA
FindFirstFileW
FindNextFileA
FindNextFileW
FormatMessageW
GetCommandLineA
GetCurrentDirectoryA
GetCurrentProcessId
GetCurrentThread
GetFileAttributesW
GetFileSize
GetFileTime
GetLastError
GetLocalTime
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
GetProcessHeap
GetStdHandle
GetSystemDirectoryA
GetSystemTimeAsFileTime
GetVersionExA
GetWindowsDirectoryW
GlobalAlloc
GlobalLock
GlobalSize
GlobalUnlock
HeapAlloc
HeapDestroy
HeapFree
HeapReAlloc
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
LocalFree
MoveFileExW
OutputDebugStringA
QueryPerformanceCounter
QueryPerformanceFrequency
ReadFile
ReadProcessMemory
ResumeThread
SetCurrentDirectoryW
SetEvent
SetFilePointer
SetFileTime
SetUnhandledExceptionFilter
Sleep
WaitForSingleObject
WriteFile

msvcrt

_setjmp3
memchr
memcmp
memcpy
memmove
memset
qsort
strcmp
strlen
strstr
longjmp

shell32

ShellExecuteA
ShellExecuteW

user32

AdjustWindowRect
BringWindowToTop
ClientToScreen
ClipCursor
CloseClipboard
CreateWindowExA
CreateWindowExW
DefWindowProcA
DefWindowProcW
DestroyWindow
DispatchMessageA
DispatchMessageW
EmptyClipboard
GetClientRect
GetClipboardData
GetCursorPos
GetDC
GetForegroundWindow
GetKeyState
GetSystemMetrics
GetWindowLongA
GetWindowPlacement
GetWindowRect
LoadCursorA
LoadImageA
MessageBoxA
OpenClipboard
PeekMessageA
PeekMessageW
PostMessageA
RegisterClassExA
RegisterClassExW
ReleaseDC
SetClipboardData
SetCursorPos
SetForegroundWindow
SetWindowLongA
SetWindowPos
SetWindowTextA
SetWindowTextW
ShowCursor
ShowWindow
TranslateMessage
UnregisterClassW
ValidateRect

winmm

waveOutClose
waveOutGetErrorTextA
waveOutGetNumDevs
waveOutOpen
waveOutPrepareHeader
waveOutReset
waveOutUnprepareHeader
waveOutWrite

Exports

Exports

AABB_Make
Atlas1D
Atlas2D
Bitmap_Scale
BlockEvents
Block_FindID
Block_Parse
Block_UNSAFE_GetName
Blocks
BoxDesc_BuildBox
BoxDesc_BuildRotatedBox
BoxDesc_XQuad
BoxDesc_XQuad2
BoxDesc_YQuad
BoxDesc_YQuad2
BoxDesc_ZQuad
BoxDesc_ZQuad2
CPE_SendPluginMessage
Camera
Camera_Register
ChatEvents
Chat_Add
Chat_Add1
Chat_Add2
Chat_Add3
Chat_Add4
Chat_AddOf
Chat_Send
Clipboard_GetText
Clipboard_SetText
Commands_Register
Context2D_Alloc
Context2D_Clear
Context2D_DrawPixels
Context2D_DrawText
Context2D_Free
Context2D_MakeTexture
Context2D_Wrap
ControllerEvents
Convert_ParseBool
Convert_ParseFloat
Convert_ParseInt
Convert_ParseUInt16
Convert_ParseUInt64
Convert_ParseUInt8
Convert_TryCodepointToCP437
DateTime_CurrentLocal
DateTime_CurrentUTC
Deflate_MakeStream
Directory_Create
Directory_Enum
DisplayInfo
Drawer
Drawer2D
Drawer2D_MakeTextTexture
Drawer2D_TextHeight
Drawer2D_TextWidth
Drawer_XMax
Drawer_XMin
Drawer_YMax
Drawer_YMin
Drawer_ZMax
Drawer_ZMin
DynamicLib_DescribeError
DynamicLib_Get
DynamicLib_Get2
DynamicLib_Load
DynamicLib_Load2
Entities
EntityEvents
Entity_GetTransform
Entity_SetModel
Entity_TouchesAny
Env
Env_Reset
Env_SetCloudsCol
Env_SetCloudsHeight
Env_SetCloudsSpeed
Env_SetEdgeBlock
Env_SetEdgeHeight
Env_SetExpFog
Env_SetFogCol
Env_SetLampLightCol
Env_SetLavaLightCol
Env_SetShadowCol
Env_SetSidesBlock
Env_SetSidesOffset
Env_SetSkyCol
Env_SetSkyboxCol
Env_SetSkyboxHorSpeed
Env_SetSkyboxVerSpeed
Env_SetSunCol
Env_SetWeather
Env_SetWeatherFade
Env_SetWeatherSpeed
EventAPIVersion
Event_RaiseFloat
Event_RaiseInt
Event_RaiseVoid
Event_Register
Event_Unregister
File_Exists
Font_Free
Font_Make
GZip_MakeStream
Game
Game_ChangeBlock
Game_UpdateBlock
Gfx
GfxEvents
Gfx_BindDynamicVb
Gfx_BindIb
Gfx_BindTexture
Gfx_BindVb
Gfx_ClearBuffers
Gfx_ClearColor
Gfx_CreateDynamicVb
Gfx_CreateIb2
Gfx_CreateTexture
Gfx_CreateVb
Gfx_DeleteDynamicVb
Gfx_DeleteIb
Gfx_DeleteTexture
Gfx_DeleteVb
Gfx_DepthOnlyRendering
Gfx_DisableMipmaps
Gfx_DisableTextureOffset
Gfx_DrawVb_IndexedTris
Gfx_DrawVb_IndexedTris_Range
Gfx_DrawVb_Lines
Gfx_EnableMipmaps
Gfx_EnableTextureOffset
Gfx_GetFog
Gfx_LoadIdentityMatrix
Gfx_LoadMatrix
Gfx_LockDynamicVb
Gfx_LockVb
Gfx_SetAlphaArgBlend
Gfx_SetAlphaBlending
Gfx_SetAlphaTest
Gfx_SetColorWrite
Gfx_SetDepthTest
Gfx_SetDepthWrite
Gfx_SetDynamicVbData
Gfx_SetFaceCulling
Gfx_SetFog
Gfx_SetFogCol
Gfx_SetFogDensity
Gfx_SetFogEnd
Gfx_SetFogMode
Gfx_SetTexturing
Gfx_SetVertexFormat
Gfx_UnlockDynamicVb
Gfx_UnlockVb
Gfx_UpdateTexturePart
Gradient_Blend
Gradient_Noise
Gradient_Vertical
Gui
Gui_Add
Gui_GetInputGrab
Gui_GetScreen
Gui_Remove
Inflate_Init2
Inflate_MakeStream2
InputEvents
Inventory
KeyBind_IsPressed
Lighting
MapImporter_Find
MapImporter_Register
Map_LoadFrom
Math_Cos
Math_Sin
Matrix_Mul
Matrix_RotateX
Matrix_RotateY
Matrix_RotateZ
Matrix_Scale
Matrix_Translate
Mem_Alloc
Mem_AllocCleared
Mem_Free
Mem_Realloc
Mem_TryAlloc
Mem_TryAllocCleared
Mem_TryRealloc
Model_ApplyTexture
Model_DrawArmPart
Model_DrawPart
Model_DrawRotate
Model_Get
Model_Init
Model_Register
Model_RegisterTexture
Model_Render
Model_SetupState
Model_UpdateVB
Models
Mutex_Create
Mutex_Free
Mutex_Lock
Mutex_Unlock
NetEvents
NetPlayer_Init
Options_Get
Options_GetBool
Options_GetEnum
Options_GetFloat
Options_GetInt
Options_Reload
Options_SaveIfChanged
Options_Set
Options_SetBool
Options_SetInt
Options_SetString
PackedCol_Lerp
PackedCol_Scale
PackedCol_ScreenBlend
PackedCol_Tint
Physics
Png_Decode
PointerEvents
Process_Exit
Process_StartGame2
Process_StartOpen
Protocol
Random_Float
Random_Next
Random_Seed
ScheduledTask_Add
Selections_Add
Selections_Remove
Server
Stopwatch_ElapsedMicroseconds
Stopwatch_Measure
Stream_CreateFile
Stream_FromFile
Stream_OpenFile
Stream_Read
Stream_ReadLine
Stream_ReadonlyBuffered
Stream_ReadonlyMemory
Stream_ReadonlyPortion
Stream_Write
Stream_WriteLine
String_Append
String_AppendBool
String_AppendColorless
String_AppendConst
String_AppendFloat
String_AppendHex
String_AppendInt
String_AppendPaddedInt
String_AppendString
String_AppendUInt32
String_CalcLen
String_CaselessContains
String_CaselessEnds
String_CaselessEquals
String_CaselessEqualsConst
String_CaselessStarts
String_Compare
String_Copy
String_CopyToRaw
String_DeleteAt
String_Equals
String_Format1
String_Format2
String_Format3
String_Format4
String_FromReadonly
String_IndexOfAt
String_IndexOfConst
String_InsertAt
String_LastIndexOfAt
String_UNSAFE_Separate
String_UNSAFE_Split
String_UNSAFE_SplitBy
String_UNSAFE_Substring
String_UNSAFE_SubstringAt
String_UNSAFE_TrimEnd
String_UNSAFE_TrimStart
StringsBuffer_Add
StringsBuffer_Remove
StringsBuffer_UNSAFE_Get
SysFonts_GetNames
TabList
TabListEvents
TabList_Remove
TabList_Set
TextureEvents
TexturePack_Extract
Thread_Detach
Thread_Join
Thread_Run
Thread_Sleep
UserEvents
Waitable_Create
Waitable_Free
Waitable_Signal
Waitable_Wait
Waitable_WaitFor
WindowEvents
WindowInfo
Window_SetTitle
Window_ShowDialog
World
WorldEvents
World_NewMap
World_SetNewMap
ZLib_MakeStream
Zip_Extract

Sections

.text
Size: 648KB - Virtual size: 648KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 156KB - Virtual size: 155KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.eh_fram
Size: 134KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1.9MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 107KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

563816c5c2c988a0cbc9bf468e49cad2

Headers

DLL Characteristics

File Characteristics

Imports

comdlg32

gdi32

imagehlp

kernel32

msvcrt

shell32

user32

winmm

Exports

Exports

Sections

.text Size: 648KB - Virtual size: 648KB

.data Size: 8KB - Virtual size: 7KB

.rdata Size: 156KB - Virtual size: 155KB

.eh_fram Size: 134KB - Virtual size: 134KB

.bss Size: - Virtual size: 1.9MB

.edata Size: 8KB - Virtual size: 7KB

.idata Size: 5KB - Virtual size: 4KB

.rsrc Size: 107KB - Virtual size: 107KB

.reloc Size: 35KB - Virtual size: 35KB

.text
Size: 648KB - Virtual size: 648KB

.data
Size: 8KB - Virtual size: 7KB

.rdata
Size: 156KB - Virtual size: 155KB

.eh_fram
Size: 134KB - Virtual size: 134KB

.bss
Size: - Virtual size: 1.9MB

.edata
Size: 8KB - Virtual size: 7KB

.idata
Size: 5KB - Virtual size: 4KB

.rsrc
Size: 107KB - Virtual size: 107KB

.reloc
Size: 35KB - Virtual size: 35KB