c6d9ca587f5ce050516852ec226a921d6cdfbaf5ca6378c82ea64acda28b262e

Sharing

Copy URL Twitter E-mail

General

Target

c6d9ca587f5ce050516852ec226a921d6cdfbaf5ca6378c82ea64acda28b262e
Size

273KB
MD5

5b3585bd82f331a264409bfc1af01096
SHA1

0447017d070a8a3d523b494ece422a61097c9878
SHA256

c6d9ca587f5ce050516852ec226a921d6cdfbaf5ca6378c82ea64acda28b262e
SHA512

3229ef6527d3e54d2719adc3b94e784d6886968d392633ac55e00faec0032764cb442da0c54a83790a6425c311667551ba9ec7b10a7409703bdea4ac119efa45
SSDEEP

6144:KOUSDXj9iiqZ2gHk1on3xf+PFLVZO7gRP:KOUkj9zqZ2gHbnhfQ9Pgk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c6d9ca587f5ce050516852ec226a921d6cdfbaf5ca6378c82ea64acda28b262e

Files

c6d9ca587f5ce050516852ec226a921d6cdfbaf5ca6378c82ea64acda28b262e
.dll windows:6 windows x86 arch:x86

97dd5c10088916c0a83b21a122d65321

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

F:\Project\Git\Project64\bin\Release\pdb\PJ64_NRage.pdb

Imports

comctl32

InitCommonControlsEx

kernel32

LoadResource
SizeofResource
GetFileSize
WriteFile
ReadFile
SetEndOfFile
SetFilePointer
FindClose
CloseHandle
lstrcmpiA
lstrcpyA
lstrcatA
lstrlenA
GetModuleFileNameA
FindResourceA
GetFullPathNameA
CreateFileA
FindFirstFileA
FindNextFileA
HeapFree
MapViewOfFile
FlushViewOfFile
UnmapViewOfFile
CreateFileMappingA
EnterCriticalSection
LeaveCriticalSection
FormatMessageA
DeleteFileA
LoadLibraryExA
DisableThreadLibraryCalls
HeapCreate
HeapDestroy
CreateThread
InitializeCriticalSection
DeleteCriticalSection
WriteConsoleW
HeapSize
ReadConsoleW
SetFilePointerEx
CreateFileW
GetConsoleMode
GetConsoleCP
FlushFileBuffers
SetStdHandle
GetCommandLineW
GetCommandLineA
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetOEMCP
IsValidCodePage
LCMapStringW
GetFileType
GetStdHandle
GetStringTypeW
GetLastError
HeapReAlloc
HeapAlloc
LockResource
LoadLibraryA
lstrcpynA
lstrcmpA
Sleep
GetProcAddress
FreeLibrary
GetACP
WideCharToMultiByte
MultiByteToWideChar
GetModuleHandleExW
ExitProcess
LoadLibraryExW
TlsFree
TlsSetValue
RaiseException
GetSystemInfo
VirtualProtect
VirtualQuery
GetModuleHandleW
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
GetCurrentProcess
TerminateProcess
RtlUnwind
GetModuleFileNameW
InterlockedFlushSList
SetLastError
EncodePointer
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
DecodePointer

user32

SetFocus
wsprintfA
SendMessageA
LoadStringA
FlashWindow
FillRect
ReleaseDC
GetDC
DrawTextA
GetWindowLongA
MessageBoxA
GetWindowRect
GetClientRect
EndPaint
BeginPaint
EnableWindow
DefWindowProcA
SetTimer
KillTimer
SendDlgItemMessageA
IsDlgButtonChecked
CheckDlgButton
GetDlgItemTextA
SetDlgItemTextA
GetDlgItem
EndDialog
DialogBoxParamA
CreateDialogParamA
MoveWindow
ShowWindow
DestroyWindow
CreateWindowExA
RegisterClassA

gdi32

SelectObject
DeleteObject
DeleteDC
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt

comdlg32

GetSaveFileNameA
GetOpenFileNameA

ole32

CoInitialize
CoUninitialize
CoSetProxyBlanket
CoCreateInstance

oleaut32

VariantClear
SysFreeString
SysAllocString

Exports

Exports

CloseDLL
ControllerCommand
DllAbout
DllConfig
DllTest
GetDllInfo
GetKeys
InitiateControllers
ReadController
RomClosed
RomOpen
WM_KeyDown
WM_KeyUp

Sections

.text
Size: 195KB - Virtual size: 195KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

97dd5c10088916c0a83b21a122d65321

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

comctl32

kernel32

user32

gdi32

comdlg32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 195KB - Virtual size: 195KB

.rdata Size: 37KB - Virtual size: 36KB

.data Size: 3KB - Virtual size: 33KB

.gfids Size: 512B - Virtual size: 276B

.rsrc Size: 25KB - Virtual size: 25KB

.reloc Size: 10KB - Virtual size: 10KB

.text
Size: 195KB - Virtual size: 195KB

.rdata
Size: 37KB - Virtual size: 36KB

.data
Size: 3KB - Virtual size: 33KB

.gfids
Size: 512B - Virtual size: 276B

.rsrc
Size: 25KB - Virtual size: 25KB

.reloc
Size: 10KB - Virtual size: 10KB