Sigma Clicker[.]rar

Sharing

Copy URL Twitter E-mail

General

Target

Sigma Clicker.rar
Size

894KB
MD5

fa27ac1dff0b42b9dea47723e50e2b4c
SHA1

976d72f7167fafe6becedf8c9a6d3be7fd5ab00a
SHA256

430fd240cec97ef344dcf7052a976d286dd8f03aff06106d66d2ed69a3268e63
SHA512

e85d12a86ef91935a1c0a88c84a61652392c394ee925db4429a27fd56bda016e1675cd911b9eb7b54cf0d1a0855a7d337300d53b916beff843a278e6f7ed7618
SSDEEP

24576:sPpGBQm8m8fEJ5ZcHJ98XnTyou3lAg1icAE:sPsOmN89J98XnTyfj1izE

Score

3^/10

Malware Config

Signatures

Unsigned PE 4 IoCs

Checks for missing Authenticode signature.

resource
unpack002/4.0.1.exe
unpack002/Sigma_Clicker_v1.14 (LATEST).exe
unpack002/V3.exe
unpack002/v5.exe

Files

Sigma Clicker.rar
.rar
sticking out your gyat for the rizzler you're so skibidi you're so fanum tax.rar
.rar
4.0.1.exe
.exe windows:6 windows x64 arch:x64

6838f519297f9aaa82c61a24735a6d90

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\artsu\OneDrive\Asztali gép\PPP\v4 src - Copy\x64\Release\ImGui Loader base.pdb

Imports

user32

GetClipboardData
PeekMessageA
PostQuitMessage
UpdateWindow
GetWindowLongW
AdjustWindowRectEx
GetKeyState
LoadCursorA
DestroyWindow
GetDC
SetWindowPos
MonitorFromWindow
EnumDisplayMonitors
ScreenToClient
SetWindowTextW
WindowFromPoint
ShowWindow
GetCapture
SetWindowLongA
ClientToScreen
IsChild
GetMonitorInfoA
DefWindowProcA
CreateWindowExA
SetLayeredWindowAttributes
SetFocus
BringWindowToTop
SetCapture
SetCursor
SetWindowLongW
GetClientRect
UnregisterClassA
RegisterClassExA
ReleaseCapture
SetForegroundWindow
IsIconic
SetCursorPos
ReleaseDC
GetCursorPos
OpenClipboard
CloseClipboard
SetClipboardData
GetWindowTextLengthW
FindWindowA
TranslateMessage
UnhookWindowsHookEx
GetForegroundWindow
GetWindowRect
GetAsyncKeyState
GetDesktopWindow
GetWindowTextW
GetMessageA
DispatchMessageA
PostMessageA
CallNextHookEx
SetWindowsHookExA
EmptyClipboard

gdi32

GetDeviceCaps

kernel32

ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
RtlCaptureContext
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
GetModuleHandleW
RtlLookupFunctionEntry
InitializeSListHead
VerifyVersionInfoW
FreeLibrary
VerSetConditionMask
GetProcAddress
QueryPerformanceFrequency
LoadLibraryA
GetModuleHandleA
GlobalUnlock
WideCharToMultiByte
GlobalLock
GlobalFree
GlobalAlloc
MultiByteToWideChar
CreateThread
Sleep
RtlVirtualUnwind
QueryPerformanceCounter

msvcp140

?_Xlength_error@std@@YAXPEBD@Z

imm32

ImmReleaseContext
ImmGetContext
ImmSetCompositionWindow

d3d9

Direct3DCreate9

vcruntime140_1

__CxxFrameHandler4

vcruntime140

_CxxThrowException
__current_exception
memmove
memcpy
memset
__C_specific_handler
strstr
__std_exception_copy
__std_exception_destroy
__std_terminate
memchr
memcmp
__current_exception_context

api-ms-win-crt-time-l1-1-0

_time64

api-ms-win-crt-heap-l1-1-0

malloc
_callnewh
free
_set_new_mode

api-ms-win-crt-runtime-l1-1-0

_cexit
_seh_filter_exe
_set_app_type
_crt_atexit
_get_narrow_winmain_command_line
_initterm
_initterm_e
exit
_exit
_invalid_parameter_noinfo_noreturn
_c_exit
_register_thread_local_exe_atexit_callback
_register_onexit_function
terminate
_wassert
_initialize_onexit_table
_configure_narrow_argv
_initialize_narrow_environment

api-ms-win-crt-stdio-l1-1-0

_wfopen
__stdio_common_vsprintf
__stdio_common_vsscanf
fwrite
fseek
fclose
fflush
__acrt_iob_func
__p__commode
ftell
_set_fmode
fread

api-ms-win-crt-string-l1-1-0

strcmp
strncmp
strncpy

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-math-l1-1-0

fmodf
ceilf
cosf
sinf
acosf
sqrtf
__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sections

.text
Size: 335KB - Virtual size: 334KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 188KB - Virtual size: 187KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 972B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Sigma_Clicker_v1.14 (LATEST).exe
.exe windows:6 windows x64 arch:x64

f0b57533fac87ab42f92a04bf1996d83

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\20240228\New folder (2)\FDSX\PPP\sigmalite\x64\Release\ImGui Loader base.pdb

Imports

user32

GetActiveWindow
ShowWindow
PeekMessageA
UpdateWindow
GetWindowLongW
AdjustWindowRectEx
GetKeyState
LoadCursorA
DestroyWindow
GetDC
SetWindowPos
MonitorFromWindow
EnumDisplayMonitors
ScreenToClient
GetWindowRect
WindowFromPoint
GetCapture
SetWindowLongA
ClientToScreen
IsChild
GetMonitorInfoA
DefWindowProcA
CreateWindowExA
SetLayeredWindowAttributes
SetFocus
BringWindowToTop
SetCapture
SetCursor
SetWindowLongW
GetClientRect
UnregisterClassA
RegisterClassExA
ReleaseCapture
SetForegroundWindow
IsIconic
SetCursorPos
ReleaseDC
GetCursorPos
OpenClipboard
CloseClipboard
EmptyClipboard
GetClipboardData
SetClipboardData
GetWindowTextLengthW
GetAsyncKeyState
PostQuitMessage
SetWindowTextW
FindWindowA
TranslateMessage
UnhookWindowsHookEx
GetDesktopWindow
SendInput
GetWindowTextW
GetMessageA
DispatchMessageA
PostMessageA
CallNextHookEx
SetWindowsHookExA
GetForegroundWindow

gdi32

GetDeviceCaps

shell32

ShellExecuteA

winmm

mciSendStringA

kernel32

ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
GetModuleHandleA
GlobalLock
GlobalFree
GlobalAlloc
RtlCaptureContext
GetComputerNameA
GetTickCount64
CreateThread
Sleep
QueryPerformanceFrequency
InitializeSListHead
VerSetConditionMask
FreeLibrary
VerifyVersionInfoW
QueryPerformanceCounter
SleepConditionVariableSRW
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetCurrentProcessId
GetCurrentThreadId
MultiByteToWideChar
GetSystemTimeAsFileTime
GetModuleHandleW
GetProcAddress
LoadLibraryA
GlobalUnlock
WideCharToMultiByte

comdlg32

GetOpenFileNameA

msvcp140

?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
_Query_perf_counter
?_Xlength_error@std@@YAXPEBD@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?uncaught_exceptions@std@@YAHXZ
_Query_perf_frequency
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?good@ios_base@std@@QEBA_NXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ

imm32

ImmReleaseContext
ImmGetContext
ImmSetCompositionWindow

d3d9

Direct3DCreate9

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__current_exception_context
_CxxThrowException
__current_exception
__C_specific_handler
memcmp
memchr
memcpy
memset
strstr
__std_exception_copy
__std_exception_destroy
__std_terminate
memmove

api-ms-win-crt-time-l1-1-0

_time64

api-ms-win-crt-stdio-l1-1-0

fread
ftell
__p__commode
_set_fmode
__acrt_iob_func
fseek
fflush
__stdio_common_vsscanf
fwrite
__stdio_common_vsprintf
_wfopen
fclose

api-ms-win-crt-heap-l1-1-0

_callnewh
free
_set_new_mode
malloc

api-ms-win-crt-utility-l1-1-0

qsort
rand

api-ms-win-crt-runtime-l1-1-0

_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_crt_atexit
_cexit
terminate
_wassert
_set_app_type
system
_get_narrow_winmain_command_line
_initterm
_initterm_e
exit
_exit
_invalid_parameter_noinfo_noreturn
_c_exit
_register_thread_local_exe_atexit_callback
_seh_filter_exe

api-ms-win-crt-string-l1-1-0

strncpy
strncmp
strcmp

api-ms-win-crt-convert-l1-1-0

atof

api-ms-win-crt-math-l1-1-0

__setusermatherr
acosf
ceilf
sinf
cosf
fmodf
sqrtf

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sections

.text
Size: 373KB - Virtual size: 372KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 194KB - Virtual size: 194KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 980B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
V3.exe
.exe windows:6 windows x64 arch:x64

c6f949e12ff78adaf798210452f92569

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\artsu\OneDrive\Asztali gép\asd\fasz - Copy\x64\Release\ImGui Loader base.pdb

Imports

kernel32

GetModuleHandleA
LoadLibraryA
QueryPerformanceFrequency
GetProcAddress
VerSetConditionMask
FreeLibrary
VerifyVersionInfoW
QueryPerformanceCounter
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
RtlCaptureContext
WideCharToMultiByte
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
GlobalUnlock
GlobalLock
GlobalFree
MultiByteToWideChar
GlobalAlloc
CreateThread
RtlLookupFunctionEntry
Sleep
ReleaseSRWLockExclusive

user32

SetWindowLongW
SetCursor
SetCapture
BringWindowToTop
SetFocus
SetLayeredWindowAttributes
CreateWindowExA
DefWindowProcA
GetMonitorInfoA
IsChild
ClientToScreen
SetWindowLongA
UnregisterClassA
ShowWindow
WindowFromPoint
SetWindowTextW
ScreenToClient
EnumDisplayMonitors
MonitorFromWindow
SetWindowPos
GetDC
DestroyWindow
LoadCursorA
GetKeyState
AdjustWindowRectEx
GetWindowLongW
UpdateWindow
PostQuitMessage
PeekMessageA
GetClientRect
RegisterClassExA
ReleaseCapture
SetForegroundWindow
IsIconic
SetCursorPos
ReleaseDC
GetCursorPos
FindWindowA
TranslateMessage
UnhookWindowsHookEx
GetForegroundWindow
OpenClipboard
CloseClipboard
EmptyClipboard
SetWindowsHookExA
CallNextHookEx
PostMessageA
DispatchMessageA
GetMessageA
GetDesktopWindow
GetAsyncKeyState
GetWindowRect
GetClipboardData
SetClipboardData
GetCapture

gdi32

GetDeviceCaps

imm32

ImmReleaseContext
ImmGetContext
ImmSetCompositionWindow

d3d9

Direct3DCreate9

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__C_specific_handler
__current_exception_context
__current_exception
memset
__std_terminate
memchr
memcmp
memcpy
memmove
strstr

api-ms-win-crt-time-l1-1-0

_time64

api-ms-win-crt-stdio-l1-1-0

_wfopen
fseek
fclose
fflush
__acrt_iob_func
__stdio_common_vsprintf
ftell
fread
fwrite
_set_fmode
__stdio_common_vsscanf
__p__commode

api-ms-win-crt-string-l1-1-0

strncpy
strncmp
strcmp

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-heap-l1-1-0

_set_new_mode
free
malloc

api-ms-win-crt-runtime-l1-1-0

_c_exit
_register_thread_local_exe_atexit_callback
_exit
exit
_initterm_e
_initterm
_get_narrow_winmain_command_line
_set_app_type
_seh_filter_exe
_cexit
terminate
_crt_atexit
_wassert
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function

api-ms-win-crt-math-l1-1-0

fmodf
cosf
__setusermatherr
sinf
sqrtf
ceilf
acosf

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sections

.text
Size: 330KB - Virtual size: 330KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 86KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
v5.exe
.exe windows:6 windows x64 arch:x64

8cfe495fe832767777e271984a7143a5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\artsu\OneDrive\Asztali gép\PPP\Geci\x64\Release\ImGui Loader base.pdb

Imports

user32

GetWindowTextLengthW
GetWindowRect
PeekMessageA
UpdateWindow
GetWindowLongW
AdjustWindowRectEx
GetKeyState
LoadCursorA
DestroyWindow
GetDC
SetWindowPos
MonitorFromWindow
EnumDisplayMonitors
SetClipboardData
SetWindowTextW
WindowFromPoint
ShowWindow
GetCapture
SetWindowLongA
ClientToScreen
IsChild
GetMonitorInfoA
DefWindowProcA
CreateWindowExA
SetLayeredWindowAttributes
SetFocus
BringWindowToTop
SetCapture
SetCursor
SetWindowLongW
GetClientRect
UnregisterClassA
RegisterClassExA
ReleaseCapture
SetForegroundWindow
IsIconic
SetCursorPos
ReleaseDC
GetCursorPos
OpenClipboard
CloseClipboard
EmptyClipboard
GetClipboardData
GetAsyncKeyState
PostQuitMessage
ScreenToClient
FindWindowA
TranslateMessage
UnhookWindowsHookEx
GetDesktopWindow
SendInput
GetWindowTextW
GetMessageA
DispatchMessageA
PostMessageA
CallNextHookEx
SetWindowsHookExA
GetForegroundWindow

gdi32

GetDeviceCaps

shell32

ShellExecuteA

winmm

mciSendStringA

kernel32

ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
GetModuleHandleA
GlobalLock
GlobalFree
GlobalAlloc
RtlCaptureContext
GetComputerNameA
GetTickCount64
CreateThread
Sleep
QueryPerformanceFrequency
InitializeSListHead
VerSetConditionMask
FreeLibrary
VerifyVersionInfoW
QueryPerformanceCounter
SleepConditionVariableSRW
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetCurrentProcessId
GetCurrentThreadId
MultiByteToWideChar
GetSystemTimeAsFileTime
GetModuleHandleW
GetProcAddress
LoadLibraryA
GlobalUnlock
WideCharToMultiByte

comdlg32

GetOpenFileNameA

msvcp140

?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
_Query_perf_counter
?_Xlength_error@std@@YAXPEBD@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?uncaught_exceptions@std@@YAHXZ
_Query_perf_frequency
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?good@ios_base@std@@QEBA_NXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ

imm32

ImmReleaseContext
ImmGetContext
ImmSetCompositionWindow

d3d9

Direct3DCreate9

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__current_exception_context
_CxxThrowException
__current_exception
__C_specific_handler
memcmp
memchr
memcpy
memset
strstr
__std_exception_copy
__std_exception_destroy
__std_terminate
memmove

api-ms-win-crt-time-l1-1-0

_time64

api-ms-win-crt-stdio-l1-1-0

fread
ftell
__p__commode
_set_fmode
__acrt_iob_func
fseek
fflush
__stdio_common_vsscanf
fwrite
__stdio_common_vsprintf
_wfopen
fclose

api-ms-win-crt-heap-l1-1-0

_callnewh
free
_set_new_mode
malloc

api-ms-win-crt-utility-l1-1-0

qsort
rand

api-ms-win-crt-runtime-l1-1-0

_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_crt_atexit
_cexit
terminate
_wassert
_set_app_type
system
_get_narrow_winmain_command_line
_initterm
_initterm_e
exit
_exit
_invalid_parameter_noinfo_noreturn
_c_exit
_register_thread_local_exe_atexit_callback
_seh_filter_exe

api-ms-win-crt-string-l1-1-0

strncpy
strncmp
strcmp

api-ms-win-crt-convert-l1-1-0

atof

api-ms-win-crt-math-l1-1-0

__setusermatherr
acosf
ceilf
sinf
cosf
fmodf
sqrtf

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sections

.text
Size: 351KB - Virtual size: 350KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 191KB - Virtual size: 191KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6838f519297f9aaa82c61a24735a6d90

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

user32

gdi32

kernel32

msvcp140

imm32

d3d9

vcruntime140_1

vcruntime140

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

Sections

.text Size: 335KB - Virtual size: 334KB

.rdata Size: 188KB - Virtual size: 187KB

.data Size: 5KB - Virtual size: 22KB

.pdata Size: 15KB - Virtual size: 14KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 1024B - Virtual size: 972B

f0b57533fac87ab42f92a04bf1996d83

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

user32

gdi32

shell32

winmm

kernel32

comdlg32

msvcp140

imm32

d3d9

vcruntime140_1

vcruntime140

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

Sections

.text Size: 373KB - Virtual size: 372KB

.rdata Size: 194KB - Virtual size: 194KB

.data Size: 5KB - Virtual size: 23KB

.pdata Size: 16KB - Virtual size: 15KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 1024B - Virtual size: 980B

c6f949e12ff78adaf798210452f92569

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

imm32

d3d9

vcruntime140_1

vcruntime140

.text
Size: 335KB - Virtual size: 334KB

.rdata
Size: 188KB - Virtual size: 187KB

.data
Size: 5KB - Virtual size: 22KB

.pdata
Size: 15KB - Virtual size: 14KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 1024B - Virtual size: 972B

.text
Size: 373KB - Virtual size: 372KB

.rdata
Size: 194KB - Virtual size: 194KB

.data
Size: 5KB - Virtual size: 23KB

.pdata
Size: 16KB - Virtual size: 15KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 1024B - Virtual size: 980B

.text
Size: 330KB - Virtual size: 330KB

.rdata
Size: 86KB - Virtual size: 86KB

.data
Size: 1KB - Virtual size: 7KB

.pdata
Size: 14KB - Virtual size: 14KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 512B - Virtual size: 160B

.text
Size: 351KB - Virtual size: 350KB

.rdata
Size: 191KB - Virtual size: 191KB

.data
Size: 5KB - Virtual size: 23KB

.pdata
Size: 15KB - Virtual size: 15KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 1024B - Virtual size: 960B