C:\Users\Teddy\Documents\GitHub\mmultiplayer\Launcher\Release\mmultiplayer.pdb
Static task
static1
General
-
Target
mmultiplayer.dll
-
Size
1.2MB
-
MD5
3124b4acdb1fa45ad9d8704b73781dae
-
SHA1
9f7b28bbe11b246e68d8c65dc1518ea43dab0160
-
SHA256
2af91a9267aa84b8398202c6bc4d89cd79629e5252394ec8e45fe00dadb2bcf0
-
SHA512
86d46ed9c2920c988228d3bc9a44edb4defe81a870049d3ed81b980e0d98b229191a0177cfa2ebdf95d561451c7b8569dbc540f0ce53e1393381ef8e03ba2155
-
SSDEEP
24576:cLtzOQ2bevD5OQw6kNnoKNyqoKjFUNkS2zWkqojjGvlOL63YPJk:8iQ2be75OQFKNvxZUNkS2zWkVjao63Y6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource mmultiplayer.dll
Files
-
mmultiplayer.dll.dll windows:6 windows x86 arch:x86
ea2fb08164405e78cecd2dc3c6a88490
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
GlobalFree
GlobalLock
WideCharToMultiByte
GlobalUnlock
GetModuleHandleA
GetLocaleInfoA
QueryPerformanceFrequency
GetProcAddress
FreeLibrary
QueryPerformanceCounter
GetModuleHandleW
GetCurrentProcess
K32GetModuleInformation
Thread32Next
Thread32First
GetCurrentThreadId
SuspendThread
CreateToolhelp32Snapshot
K32GetModuleBaseNameW
CloseHandle
FreeConsole
Module32FirstW
ReadProcessMemory
GetCurrentProcessId
Module32NextW
AllocConsole
OpenThread
IsDebuggerPresent
SetUnhandledExceptionFilter
WriteConsoleW
HeapSize
SetStdHandle
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GlobalAlloc
GetACP
IsValidCodePage
GetTimeZoneInformation
HeapReAlloc
ReadConsoleInputW
SetConsoleMode
GetFileSizeEx
GetConsoleOutputCP
WriteFile
FlushFileBuffers
ReadConsoleW
GetConsoleMode
GetFileType
GetStdHandle
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
MultiByteToWideChar
VirtualAlloc
VirtualFree
LoadLibraryA
GetDateFormatW
HeapFree
HeapAlloc
GetModuleFileNameW
SetEnvironmentVariableW
GetConsoleCP
VirtualProtect
GetLocalTime
Sleep
GetOEMCP
GetTickCount64
ExitProcess
ReadFile
GetModuleHandleExW
FreeLibraryAndExitThread
GetStringTypeW
ReleaseSRWLockExclusive
ReleaseSRWLockShared
AcquireSRWLockExclusive
AcquireSRWLockShared
InitializeSRWLock
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
TryEnterCriticalSection
DeleteCriticalSection
WaitForSingleObjectEx
GetExitCodeThread
LocalFree
FormatMessageA
CreateDirectoryW
CreateFileW
FindClose
FindFirstFileExW
FindNextFileW
GetFileAttributesExW
SetEndOfFile
SetFilePointerEx
AreFileApisANSI
GetLastError
EncodePointer
DecodePointer
LCMapStringEx
GetSystemTimeAsFileTime
GetLocaleInfoEx
CompareStringEx
GetCPInfo
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
CreateEventW
UnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
GetStartupInfoW
InitializeSListHead
RtlUnwind
RaiseException
InterlockedFlushSList
SetLastError
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
CreateThread
ExitThread
user32
MessageBoxA
SendInput
SetWindowLongW
TranslateMessage
PeekMessageW
CallWindowProcW
SetClipboardData
GetClipboardData
EmptyClipboard
CloseClipboard
OpenClipboard
GetCursorPos
SetCursorPos
ReleaseCapture
IsWindowUnicode
DestroyWindow
GetKeyState
GetMessageExtraInfo
ScreenToClient
GetCapture
ClientToScreen
TrackMouseEvent
GetKeyboardLayout
GetForegroundWindow
LoadCursorW
SetCapture
SetCursor
GetClientRect
ws2_32
sendto
freeaddrinfo
htons
recv
recvfrom
connect
socket
send
WSAStartup
getaddrinfo
shutdown
closesocket
imm32
ImmSetCandidateWindow
ImmSetCompositionWindow
ImmReleaseContext
ImmGetContext
Sections
.text Size: 976KB - Virtual size: 976KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 177KB - Virtual size: 177KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 46KB - Virtual size: 77KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 248B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ