cdc8bf47acff363b1c3258c6195cd4cd1780c8f3ac980443592d4600088ec936

Sharing

Copy URL Twitter E-mail

General

Target

cdc8bf47acff363b1c3258c6195cd4cd1780c8f3ac980443592d4600088ec936
Size

687KB
MD5

67f02af6f28b0eae7b44e794669593e6
SHA1

9793735975199e763fdb8cacad6523043a803686
SHA256

cdc8bf47acff363b1c3258c6195cd4cd1780c8f3ac980443592d4600088ec936
SHA512

fe79fa70430b23b68e4ac87e5abacd201d86e68c2c0f33229d20558fc2bb90192b6553419d1a9c88ce8dfbd6490bd506f4503dc288c014cc85b7be29a4f93765
SSDEEP

12288:ZfMLBzmWQrEzt09n2rsbeJy5T146LEeQ12RcGKlzhNIbYQ9Z7h6kXZJlZ4MhAhL3:ZfMLBzmWQy0l2rsbeJy1DLxQ6cGKl65q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cdc8bf47acff363b1c3258c6195cd4cd1780c8f3ac980443592d4600088ec936

Files

cdc8bf47acff363b1c3258c6195cd4cd1780c8f3ac980443592d4600088ec936
.dll windows:5 windows x86 arch:x86

f8371b8af177342c61a37a8f5d91c3de

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\builds\build-sourcemod-msvc12\windows-1.12\OUTPUT\core\sourcemod.2.tf2\windows-x86\sourcemod.2.tf2.pdb

Imports

kernel32

GetLastError
FreeLibrary
GetProcAddress
LoadLibraryA
FormatMessageA
GetFileAttributesA
WriteConsoleW
SetEndOfFile
ReadConsoleW
ReadFile
HeapSize
CreateFileW
GetConsoleMode
GetConsoleOutputCP
WriteFile
FlushFileBuffers
SetStdHandle
GetStringTypeW
SetFilePointerEx
GetFileSizeEx
CreateDirectoryW
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentThreadId
GetModuleHandleA
LoadLibraryExA
MultiByteToWideChar
WideCharToMultiByte
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
CloseHandle
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwind
RaiseException
InterlockedFlushSList
SetLastError
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
GetDriveTypeW
GetFullPathNameW
SetEnvironmentVariableW
SetCurrentDirectoryW
GetCurrentDirectoryW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapFree
HeapAlloc
GetStdHandle
GetFileType
LCMapStringW
DecodePointer
HeapReAlloc
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW

tier0

_AssertValidWritePtr
_AssertValidReadPtr
ThreadWaitForObjects
GetThreadedLoadLibraryFunc
ReleaseThreadHandle
GetCPUInformation
g_VProfCurrentProfile
?OutputReport@CVProfile@@QAEXHPBDH@Z
?Pause@CVProfile@@QAEXXZ
?ExitScope@CVProfile@@QAEXXZ
?EnterScope@CVProfile@@QAEXPBDH0_NH@Z
?Resume@CVProfNode@@QAEXXZ
Warning
GetSpewOutputFunc
SpewOutputFunc
MemFreeScratch
MemAllocScratch
AssertValidStringPtr
Msg
DevMsg
?DevMsg@@YAXPBDZZ
?Lock@CThreadFastMutex@@ACEXII@Z
g_pMemAlloc
?ConColorMsg@@YAXABVColor@@PBDZZ
?ConMsg@@YAXPBDZZ
Plat_IsInDebugSession
Error
?DevWarning@@YAXPBDZZ
CommandLine_Tier0
CreateSimpleThread

vstdlib

RandomFloat
RandomInt
KeyValuesSystem
RandomSeed

Exports

Exports

CreateInterface
cvar

Sections

.text
Size: 508KB - Virtual size: 508KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 123KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f8371b8af177342c61a37a8f5d91c3de

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

tier0

vstdlib

Exports

Exports

Sections

.text Size: 508KB - Virtual size: 508KB

.rdata Size: 123KB - Virtual size: 123KB

.data Size: 24KB - Virtual size: 86KB

.rsrc Size: 1024B - Virtual size: 880B

.reloc Size: 29KB - Virtual size: 28KB

.text
Size: 508KB - Virtual size: 508KB

.rdata
Size: 123KB - Virtual size: 123KB

.data
Size: 24KB - Virtual size: 86KB

.rsrc
Size: 1024B - Virtual size: 880B

.reloc
Size: 29KB - Virtual size: 28KB