sider-7[.]1[.]7[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

sider-7.1.7.zip
Size

5.1MB
MD5

8bc08b6185499c9b05ce93472c5cad89
SHA1

aeed2252df300bdc2bd2fd7599f556b5e5b91889
SHA256

451b6b34b1d33ef54a3045e0fa6c40d7bb750599ac1ab1043e898b91974a31b5
SHA512

9a6c37b4c532ec03a3dab85c4d25e61cadea5d2d351bf1ade668bd42ad5403e90e475a72c1218171db3a0579589f424ae62fb67ab7763ca537f766999b287e8f
SSDEEP

98304:9M0nk94c6b3GzV61HkTgvBhngRZo6Piw6enW6CyZPSQqBGfXKd5dy/SfkX1:9Mck9lPq4KjbeW3yZPSQoGXKyX1

Score

3^/10

Malware Config

Signatures

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/sider-7.1.7/sider.dll
unpack001/sider-7.1.7/sider.exe

Files

sider-7.1.7.zip
.zip
sider-7.1.7/content/audio-demo/cr_suuu_d6.mp3
sider-7.1.7/content/audio-demo/sample.wav
sider-7.1.7/content/audio-demo/toggle.wav
sider-7.1.7/content/audio-demo/uefa.mp3
sider-7.1.7/content/netblock/common/script/flow/Exhibition/ExhibiUgcCheck.json
sider-7.1.7/content/trophy-server/eng_community_shield/common/demo/prop/cup_afc_cl_hi/#Win/cup_afc_cl_hi.fpk
sider-7.1.7/content/trophy-server/eng_community_shield/common/demo/prop/cup_afc_cl_hi/#Win/cup_afc_cl_hi.fpkd
sider-7.1.7/content/trophy-server/eng_community_shield/common/demo/prop/cup_afc_cl_hi/#windx11/english_supercup_bsm.ftex
sider-7.1.7/content/trophy-server/eng_community_shield/common/demo/prop/cup_afc_cl_hi/#windx11/english_supercup_mtl.ftex
sider-7.1.7/content/trophy-server/eng_community_shield/common/demo/prop/cup_afc_cl_hi/#windx11/english_supercup_nrm.ftex
sider-7.1.7/content/trophy-server/eng_community_shield/common/demo/prop/cup_afc_cl_hi/#windx11/english_supercup_srm.ftex
sider-7.1.7/content/trophy-server/eng_community_shield/common/demo/prop/cup_ame_hi/#Win/cup_ame_hi.fpk
sider-7.1.7/content/trophy-server/eng_community_shield/common/demo/prop/cup_lg_fra_hi/#Win/cup_lg_fra_hi.fpk
sider-7.1.7/content/trophy-server/eng_fa_cup/common/demo/prop/cup_afc_cl_hi/#Win/cup_afc_cl_hi.fpk
sider-7.1.7/content/trophy-server/eng_fa_cup/common/demo/prop/cup_afc_cl_hi/#Win/cup_afc_cl_hi.fpkd
sider-7.1.7/content/trophy-server/eng_fa_cup/common/demo/prop/cup_afc_cl_hi/#windx11/trophy_fa_bsm.ftex
sider-7.1.7/content/trophy-server/eng_fa_cup/common/demo/prop/cup_afc_cl_hi/#windx11/trophy_fa_mtl.ftex
sider-7.1.7/content/trophy-server/eng_fa_cup/common/demo/prop/cup_afc_cl_hi/#windx11/trophy_fa_nrm.ftex
sider-7.1.7/content/trophy-server/eng_fa_cup/common/demo/prop/cup_afc_cl_hi/#windx11/trophy_fa_srm.ftex
sider-7.1.7/content/trophy-server/eng_fa_cup/common/demo/prop/cup_club_eur_hi/#Win/cup_club_eur_hi.fpk
sider-7.1.7/content/trophy-server/eng_premier_league/common/demo/prop/cup_afc_cl_hi/#windx11/epl_bsm.ftex
sider-7.1.7/content/trophy-server/eng_premier_league/common/demo/prop/cup_afc_cl_hi/#windx11/epl_mtl.ftex
sider-7.1.7/content/trophy-server/eng_premier_league/common/demo/prop/cup_afc_cl_hi/#windx11/epl_nrm.ftex
sider-7.1.7/content/trophy-server/eng_premier_league/common/demo/prop/cup_afc_cl_hi/#windx11/epl_srm.ftex
sider-7.1.7/content/trophy-server/eng_premier_league/common/demo/prop/cup_lg_che_hi/#Win/cup_lg_che_hi.fpk
sider-7.1.7/content/trophy-server/eng_premier_league/readme.txt
sider-7.1.7/content/trophy-server/map.txt
sider-7.1.7/content/trophy-server/uefa_supercup/common/demo/anime/FoxAnim/FixDemo/Animations/dml_end_champione03_cup_afc_cl.gani
sider-7.1.7/content/trophy-server/uefa_supercup/common/demo/anime/FoxAnim/FixDemo/Animations/dml_end_champione03_cup_afc_cl_cup_afc_cl_hi.gani
sider-7.1.7/content/trophy-server/uefa_supercup/common/demo/anime/FoxAnim/FixDemo/Animations/dml_end_champione03_cup_afc_cl_eyes_target.gani
sider-7.1.7/content/trophy-server/uefa_supercup/common/demo/anime/FoxAnim/FixDemo/Animations/dml_end_trophy01_cup_intclub.gani
sider-7.1.7/content/trophy-server/uefa_supercup/common/demo/anime/FoxAnim/FixDemo/Animations/dml_end_trophy01_cup_intclub_cup_intclub_hi.gani
sider-7.1.7/content/trophy-server/uefa_supercup/common/demo/anime/FoxAnim/FixDemo/Animations/dml_end_trophy01_cup_intclub_eyes_target.gani
sider-7.1.7/content/trophy-server/uefa_supercup/common/demo/fixdemo/end/cut_data/end_trophy_02_cup_cam.fdc
sider-7.1.7/content/trophy-server/uefa_supercup/common/demo/fixdemo/end/cut_data/end_trophy_02_cupintclub.fdc
sider-7.1.7/content/trophy-server/uefa_supercup/common/demo/fixdemoobj/cupstand_cmn/#Win/cupstand_cmn.fpk
sider-7.1.7/content/trophy-server/uefa_supercup/common/demo/fixdemoobj/cupstand_uefa_cl/#Win/cupstand_uefa_cl.fpk
sider-7.1.7/content/trophy-server/uefa_supercup/common/demo/fixdemoobj/cupstand_uefa_cl/#Win/cupstand_uefa_cl.fpkd
sider-7.1.7/content/trophy-server/uefa_supercup/common/demo/fixdemoobj/cupstand_uefa_cl/#windx11/cupstand_uefa_cl0_bsm_alp.ftex
sider-7.1.7/content/trophy-server/uefa_supercup/common/demo/fixdemoobj/cupstand_uefa_cl/#windx11/cupstand_uefa_cl_nrm.ftex
sider-7.1.7/content/trophy-server/uefa_supercup/common/demo/prop/cup_afc_cl_hi/#Win/cup_afc_cl_hi.fpk
sider-7.1.7/content/trophy-server/uefa_supercup/common/demo/prop/cup_intclub_hi/#Win/cup_intclub_hi.fpk
sider-7.1.7/content/trophy-server/uefa_supercup/common/demo/prop/cup_uefa_sc_hi/#Win/cup_uefa_sc_hi.fpk
sider-7.1.7/content/trophy-server/uefa_supercup/common/demo/prop/cup_uefa_sc_hi/#Win/cup_uefa_sc_hi.fpkd
sider-7.1.7/content/trophy-server/uefa_supercup/common/demo/prop/cup_uefa_sc_hi/#windx11/cup_uefa_sc_bsm.ftex
sider-7.1.7/content/trophy-server/uefa_supercup/common/demo/prop/cup_uefa_sc_hi/#windx11/cup_uefa_sc_mtl.ftex
sider-7.1.7/content/trophy-server/uefa_supercup/common/demo/prop/cup_uefa_sc_hi/#windx11/cup_uefa_sc_nrm.ftex
sider-7.1.7/content/trophy-server/uefa_supercup/common/demo/prop/cup_uefa_sc_hi/#windx11/cup_uefa_sc_srm.ftex
sider-7.1.7/doc/cap1.jpg
.jpg
sider-7.1.7/doc/cap2.jpg
.jpg
sider-7.1.7/doc/cap3.jpg
.jpg
sider-7.1.7/doc/cap4.jpg
.jpg
sider-7.1.7/doc/cr7.jpg
.jpg
sider-7.1.7/doc/history.txt
sider-7.1.7/doc/license-kmp.txt
sider-7.1.7/doc/license-luajit.txt
sider-7.1.7/doc/license-ma.txt
sider-7.1.7/doc/license-zlib.txt
sider-7.1.7/doc/license.txt
sider-7.1.7/doc/readme.html
.html
sider-7.1.7/doc/scripting.html
.html
sider-7.1.7/doc/tournaments.txt
sider-7.1.7/gamepad.ini
sider-7.1.7/livecpk/ball-root/Asset/model/ball/ball021/#Win/ball.fpk
sider-7.1.7/livecpk/ball-root/Asset/model/ball/ball021/#Win/ball.fpkd
sider-7.1.7/livecpk/ball-root/Asset/model/ball/ball021/#windx11/ball021_c_bsm_alp.ftex
sider-7.1.7/livecpk/ball-root/Asset/model/ball/ball021/#windx11/ball021_n_nrm.ftex
sider-7.1.7/livecpk/ball-root/Asset/model/ball/ball021/#windx11/ball021_s_srm.ftex
sider-7.1.7/livecpk/ball-root/common/render/thumbnail/ball/ball_021.dds
sider-7.1.7/modules/audiodemo.lua
sider-7.1.7/modules/audiodemo2.lua
sider-7.1.7/modules/camera.lua
.js
sider-7.1.7/modules/cpkdump.lua
sider-7.1.7/modules/cr7_audio.lua
sider-7.1.7/modules/env.lua
sider-7.1.7/modules/etrace.lua
sider-7.1.7/modules/facedump.lua
sider-7.1.7/modules/filedump.lua
sider-7.1.7/modules/filedump2.lua
sider-7.1.7/modules/fsdemo.lua
sider-7.1.7/modules/gc64test.lua
sider-7.1.7/modules/inputdemo.lua
sider-7.1.7/modules/jittest.lua
sider-7.1.7/modules/kitrewrite.lua
sider-7.1.7/modules/matchset.lua
sider-7.1.7/modules/mstats.lua
sider-7.1.7/modules/netblock.lua
sider-7.1.7/modules/overdemo.lua
sider-7.1.7/modules/pointers.lua
sider-7.1.7/modules/snow.lua
sider-7.1.7/modules/stadswitch.lua
sider-7.1.7/modules/timeaccel.lua
sider-7.1.7/modules/tracer.lua
sider-7.1.7/modules/trophy.lua
sider-7.1.7/modules/zlibtest.lua
sider-7.1.7/sider-icon.dds
sider-7.1.7/sider.dll
.dll windows:6 windows x64 arch:x64

8687ba40df98b915dddf2e8c95b8308d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

user32

SetRect
FillRect
GetClientRect
FindWindowW
SetWindowsHookExW
UnhookWindowsHookEx
CallNextHookEx
PostMessageW

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

ole32

CoCreateInstance
PropVariantClear
StringFromGUID2

dinput8

DirectInput8Create

xinput9_1_0

XInputGetState

dwrite

DWriteCreateFactory

kernel32

GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
GetCommandLineW
GetEnvironmentStringsW
FindFirstFileExW
FindClose
FreeEnvironmentStringsW
SetEnvironmentVariableW
CreateFileW
GetFileSize
GetFileTime
ReadFile
SetFilePointer
CloseHandle
GetLastError
HeapAlloc
HeapFree
GetProcessHeap
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
WaitForSingleObject
Sleep
GetCurrentProcess
CreateThread
GetCurrentThreadId
SetThreadPriority
SetPriorityClass
GetTickCount64
VirtualProtect
CreateFileMappingW
OpenFileMappingW
MapViewOfFile
UnmapViewOfFile
GetModuleFileNameW
GetStringTypeW
GetPrivateProfileIntW
GetPrivateProfileSectionW
IsBadReadPtr
MultiByteToWideChar
WideCharToMultiByte
GetModuleHandleA
QueryPerformanceCounter
QueryPerformanceFrequency
HeapReAlloc
SetEvent
ResetEvent
ReleaseSemaphore
CreateEventA
CreateEventW
FreeLibrary
GetProcAddress
LoadLibraryA
CreateSemaphoreA
GetFileInformationByHandleEx
InitOnceExecuteOnce
RtlUnwindEx
RaiseException
SetLastError
VirtualAlloc
VirtualFree
VirtualQuery
LoadLibraryExA
GetModuleFileNameA
GetModuleHandleExA
RtlUnwind
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
MoveFileExW
DeleteFileW
GetTimeZoneInformation
SetStdHandle
HeapSize
SetEndOfFile
GetModuleHandleW
FormatMessageA
RtlPcToFileHeader
InterlockedFlushSList
EncodePointer
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
GetStdHandle
GetFileType
GetModuleHandleExW
WriteConsoleW
ExitProcess
DuplicateHandle
CreateProcessW
GetTempPathW
GetConsoleMode
ReadConsoleW
WriteFile
GetConsoleOutputCP
GetFileSizeEx
SetFilePointerEx
FlushFileBuffers
OutputDebugStringW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetExitCodeProcess
GetFileAttributesExW
CreatePipe

gdi32

GetObjectW
DeleteObject
CreateSolidBrush
GetCurrentObject

Exports

Exports

?append_to_log_@@YAXPEB_WZZ
?close_log_@@YAXXZ
?get_module_version@@YAXPEAUHINSTANCE__@@AEAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?get_start_game@@YA_NAEAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?log_@@YAXPEB_WZZ
?logu_@@YAXPEBDZZ
?open_log_@@YAXPEB_WZZ
?setHook1@@YAXXZ
?setHook@@YAXXZ
?start_log_@@YAXPEB_WZZ
?start_minimized@@YA_NXZ
?unsetHook@@YAX_N@Z
__swprintf_l
__vswprintf_l
_fprintf_l
_fprintf_p
_fprintf_p_l
_fprintf_s_l
_fscanf_l
_fscanf_s_l
_fwprintf_l
_fwprintf_p
_fwprintf_p_l
_fwprintf_s_l
_fwscanf_l
_fwscanf_s_l
_printf_l
_printf_p
_printf_p_l
_printf_s_l
_scanf_l
_scanf_s_l
_scprintf
_scprintf_l
_scprintf_p
_scprintf_p_l
_scwprintf
_scwprintf_l
_scwprintf_p
_scwprintf_p_l
_snprintf
_snprintf_c
_snprintf_c_l
_snprintf_l
_snprintf_s
_snprintf_s_l
_snscanf
_snscanf_l
_snscanf_s
_snscanf_s_l
_snwprintf
_snwprintf_l
_snwprintf_s
_snwprintf_s_l
_snwscanf
_snwscanf_l
_snwscanf_s
_snwscanf_s_l
_sprintf_l
_sprintf_p
_sprintf_p_l
_sprintf_s_l
_sscanf_l
_sscanf_s_l
_swprintf
_swprintf_c
_swprintf_c_l
_swprintf_l
_swprintf_p
_swprintf_p_l
_swprintf_s_l
_swscanf_l
_swscanf_s_l
_vfprintf_l
_vfprintf_p
_vfprintf_p_l
_vfprintf_s_l
_vfscanf_l
_vfscanf_s_l
_vfwprintf_l
_vfwprintf_p
_vfwprintf_p_l
_vfwprintf_s_l
_vfwscanf_l
_vfwscanf_s_l
_vprintf_l
_vprintf_p
_vprintf_p_l
_vprintf_s_l
_vscanf_l
_vscanf_s_l
_vscprintf
_vscprintf_l
_vscprintf_p
_vscprintf_p_l
_vscwprintf
_vscwprintf_l
_vscwprintf_p
_vscwprintf_p_l
_vsnprintf
_vsnprintf_c
_vsnprintf_c_l
_vsnprintf_l
_vsnprintf_s
_vsnprintf_s_l
_vsnwprintf
_vsnwprintf_l
_vsnwprintf_s
_vsnwprintf_s_l
_vsnwscanf_l
_vsnwscanf_s_l
_vsprintf_l
_vsprintf_p
_vsprintf_p_l
_vsprintf_s_l
_vsscanf_l
_vsscanf_s_l
_vswprintf
_vswprintf_c
_vswprintf_c_l
_vswprintf_l
_vswprintf_p
_vswprintf_p_l
_vswprintf_s_l
_vswscanf_l
_vswscanf_s_l
_vwprintf_l
_vwprintf_p
_vwprintf_p_l
_vwprintf_s_l
_vwscanf_l
_vwscanf_s_l
_wprintf_l
_wprintf_p
_wprintf_p_l
_wprintf_s_l
_wscanf_l
_wscanf_s_l
fprintf
fprintf_s
fscanf
fscanf_s
fwprintf
fwprintf_s
fwscanf
fwscanf_s
printf
printf_s
scanf
scanf_s
snprintf
sprintf
sprintf_s
sscanf
sscanf_s
swprintf
swprintf_s
swscanf
swscanf_s
vfprintf
vfprintf_s
vfscanf
vfscanf_s
vfwprintf
vfwprintf_s
vfwscanf
vfwscanf_s
vprintf
vprintf_s
vscanf
vscanf_s
vsnprintf
vsnprintf_s
vsprintf
vsprintf_s
vsscanf
vsscanf_s
vswprintf
vswprintf_s
vswscanf
vswscanf_s
vwprintf
vwprintf_s
vwscanf
vwscanf_s
wprintf
wprintf_s
wscanf
wscanf_s

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 288KB - Virtual size: 288KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
sider-7.1.7/sider.exe
.exe windows:6 windows x64 arch:x64

2a897660112acf58740b693cfbbf672a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

user32

SendMessageW
DefWindowProcW
PostQuitMessage
RegisterClassExW
TranslateMessage
ShowWindow
SetForegroundWindow
FindWindowW
LoadCursorW
DispatchMessageW
CreateWindowExW
GetMessageW
IsDialogMessageW
LoadIconW

gdi32

GetStockObject

shell32

ShellExecuteW

sider

?unsetHook@@YAX_N@Z
?log_@@YAXPEB_WZZ
?start_log_@@YAXPEB_WZZ
?open_log_@@YAXPEB_WZZ
?close_log_@@YAXXZ
?append_to_log_@@YAXPEB_WZZ
?get_module_version@@YAXPEAUHINSTANCE__@@AEAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?get_start_game@@YA_NAEAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?start_minimized@@YA_NXZ
?setHook@@YAXXZ

kernel32

CloseHandle
CreateFileW
SetFilePointerEx
WriteConsoleW
GetConsoleCP
FlushFileBuffers
HeapReAlloc
HeapSize
GetProcessHeap
GetConsoleMode
DeleteCriticalSection
LCMapStringW
GetStringTypeW
GetFileType
SetStdHandle
FreeEnvironmentStringsW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
GetEnvironmentStringsW
RtlPcToFileHeader
RaiseException
RtlUnwindEx
GetLastError
SetLastError
EncodePointer
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
GetStdHandle
WriteFile
GetModuleFileNameW
ExitProcess
GetModuleHandleExW
HeapAlloc
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte

Sections

.text
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 374KB - Virtual size: 374KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
sider-7.1.7/sider.ini
sider-7.1.7/toggle.wav

Sharing

General

Malware Config

Signatures

Files

8687ba40df98b915dddf2e8c95b8308d

Headers

DLL Characteristics

File Characteristics

Imports

user32

version

ole32

dinput8

xinput9_1_0

dwrite

kernel32

gdi32

Exports

Exports

Sections

.text Size: 1.3MB - Virtual size: 1.3MB

.rdata Size: 288KB - Virtual size: 288KB

.data Size: 21KB - Virtual size: 53KB

.pdata Size: 60KB - Virtual size: 59KB

_RDATA Size: 512B - Virtual size: 348B

.rsrc Size: 1024B - Virtual size: 688B

.reloc Size: 4KB - Virtual size: 4KB

2a897660112acf58740b693cfbbf672a

Headers

DLL Characteristics

File Characteristics

Imports

user32

gdi32

shell32

sider

kernel32

Sections

.text Size: 60KB - Virtual size: 60KB

.rdata Size: 39KB - Virtual size: 39KB

.data Size: 3KB - Virtual size: 7KB

.pdata Size: 4KB - Virtual size: 4KB

_RDATA Size: 512B - Virtual size: 148B

.rsrc Size: 374KB - Virtual size: 374KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 1.3MB - Virtual size: 1.3MB

.rdata
Size: 288KB - Virtual size: 288KB

.data
Size: 21KB - Virtual size: 53KB

.pdata
Size: 60KB - Virtual size: 59KB

_RDATA
Size: 512B - Virtual size: 348B

.rsrc
Size: 1024B - Virtual size: 688B

.reloc
Size: 4KB - Virtual size: 4KB

.text
Size: 60KB - Virtual size: 60KB

.rdata
Size: 39KB - Virtual size: 39KB

.data
Size: 3KB - Virtual size: 7KB

.pdata
Size: 4KB - Virtual size: 4KB

_RDATA
Size: 512B - Virtual size: 148B

.rsrc
Size: 374KB - Virtual size: 374KB

.reloc
Size: 2KB - Virtual size: 1KB