D:\projects\wmeold\src\BuildAll\ReleaseD3D9\wme_D3D9.pdb
Static task
static1
1 signatures
General
-
Target
KillTheFaggot.exe
-
Size
6.3MB
-
MD5
f8a8dfbabd284501f8ce93321faea36c
-
SHA1
f28d5e8b3aa325429d48566599907be988287af0
-
SHA256
42221717814732bf5b15aa78f38ea8c77c2e85ca59700cac76d191bfc72cf2f9
-
SHA512
cf9ef6d9a32107da96e3ae6a23b6ede19305fc99523a11bf77cf25f8d1ae472ed7ac905433bd0d1613a6daea474f77d2fd5af11cb8e38a5dc5146deca19432ae
-
SSDEEP
196608:BsBpkt81x+6H9sdswCVjlXKwKmXUbYnKwkjiNsj6p/mraiAeiYVENXcCLcAO0aMU:6Bpkt81x+6H9sdswCVjlXKwKmXUbYnKf
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource KillTheFaggot.exe
Files
-
KillTheFaggot.exe.exe windows:5 windows x86 arch:x86
f46f286fe467164a63824b16e26f6fdc
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
d3dx9_34
D3DXCreateTexture
D3DXCreateTextureFromFileInMemoryEx
D3DXCreateEffect
D3DXVec3TransformNormal
D3DXCheckTextureRequirements
D3DXMatrixDeterminant
D3DXMatrixTranspose
D3DXVec4Transform
D3DXQuaternionRotationAxis
D3DXQuaternionMultiply
D3DXQuaternionRotationMatrix
D3DXPlaneFromPoints
D3DXPlaneIntersectLine
D3DXMatrixLookAtLH
D3DXMatrixPerspectiveFovLH
D3DXVec3TransformCoord
D3DXMatrixRotationZ
D3DXVec2TransformCoord
D3DXMatrixRotationYawPitchRoll
D3DXMatrixScaling
D3DXMatrixTranslation
D3DXMatrixMultiply
D3DXVec3Transform
D3DXVec3Normalize
D3DXMatrixInverse
D3DXCreateRenderToSurface
D3DXMatrixRotationY
D3DXMatrixRotationQuaternion
D3DXQuaternionSlerp
D3DXFileCreate
D3DXLoadSkinMeshFromXof
D3DXComputeBoundingBox
D3DXGetFVFVertexSize
D3DXVec3Project
winmm
waveOutSetVolume
waveOutGetDevCapsA
waveOutGetVolume
timeGetTime
version
GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA
ws2_32
inet_addr
connect
socket
WSAGetLastError
WSACleanup
WSAStartup
htons
gethostbyname
listen
accept
recv
send
WSAAsyncSelect
shutdown
closesocket
bind
avifil32
AVIStreamRelease
AVIFileRelease
AVIStreamGetFrameClose
AVIStreamReadFormat
AVIStreamSampleToTime
AVIStreamLength
AVIStreamStart
AVIFileGetStream
AVIFileOpenA
AVIStreamGetFrame
AVIStreamTimeToSample
AVIStreamGetFrameOpen
AVIStreamRead
shlwapi
SHDeleteKeyW
comctl32
ord17
kernel32
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetStringTypeW
InitializeCriticalSectionAndSpinCount
SetStdHandle
GetLocaleInfoW
CreateFileA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEndOfFile
GetProcessHeap
CompareStringA
CompareStringW
SetEnvironmentVariableA
HeapSize
GetModuleHandleA
GetUserDefaultLangID
SetCurrentDirectoryA
GetModuleFileNameA
IsDebuggerPresent
OutputDebugStringA
GetLocalTime
DeleteFileA
LoadLibraryA
FreeLibrary
GetProcAddress
GetVersionExA
GetCurrentDirectoryA
MultiByteToWideChar
WideCharToMultiByte
GetPrivateProfileStringA
GetPrivateProfileIntA
GetFullPathNameW
GetDriveTypeA
GetTempPathA
Sleep
GetSystemDirectoryA
CopyFileA
LoadResource
SizeofResource
FindResourceA
GlobalUnlock
GlobalLock
GlobalAlloc
FreeResource
LockResource
MulDiv
GetCommandLineA
GetStartupInfoA
RtlUnwind
RaiseException
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetLastError
GetSystemTimeAsFileTime
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
FindFirstFileA
FindNextFileA
CreateDirectoryA
GetFullPathNameA
HeapFree
HeapAlloc
HeapReAlloc
InterlockedIncrement
InterlockedDecrement
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
SetFilePointer
EnterCriticalSection
LeaveCriticalSection
CloseHandle
ReadFile
GetModuleHandleW
ExitProcess
WriteFile
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RemoveDirectoryA
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LCMapStringA
LCMapStringW
VirtualAlloc
GetTimeZoneInformation
user32
SendMessageW
SendMessageA
GetNextDlgTabItem
SetFocus
MapWindowPoints
EndDialog
GetDlgItem
GetDesktopWindow
SetCapture
ReleaseCapture
SetRectEmpty
OffsetRect
DefWindowProcA
RegisterWindowMessageA
SetCursor
ClientToScreen
GetClientRect
GetWindowRect
GetSystemMetrics
PostQuitMessage
DestroyWindow
ReleaseDC
GetWindowDC
UpdateWindow
ShowWindow
SetWindowPos
IntersectRect
CreateWindowExA
RegisterClassA
LoadCursorA
LoadIconA
MessageBoxA
LoadStringA
IsIconic
WaitMessage
DispatchMessageA
TranslateMessage
GetMessageA
PeekMessageA
GetCursorPos
SetCursorPos
ScreenToClient
IsRectEmpty
PtInRect
SetRect
SetForegroundWindow
CopyRect
IsZoomed
EnumChildWindows
GetWindowTextA
GetAsyncKeyState
UnionRect
SetWindowLongA
ClipCursor
SetWindowTextW
SetWindowTextA
MonitorFromWindow
EnumDisplayMonitors
InflateRect
EqualRect
GetCaretBlinkTime
GetClipboardData
IsClipboardFormatAvailable
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
DialogBoxParamA
CreateDialogIndirectParamA
GetWindowLongA
SetActiveWindow
GetActiveWindow
IsDialogMessageA
PostMessageA
EnableWindow
IsWindowEnabled
gdi32
BitBlt
GetDIBits
DeleteDC
CreatePen
CreateCompatibleDC
LineTo
DeleteObject
RemoveFontResourceA
AddFontResourceA
GetStockObject
SelectObject
SetBkColor
SetTextColor
GetTextExtentPointA
TextOutA
GetTextExtentPointW
TextOutW
CreateCompatibleBitmap
CreateDIBSection
CreateFontA
GetDeviceCaps
SetMapMode
GetTextExtentPoint32W
GetTextExtentPoint32A
SetBkMode
SetTextAlign
ExtTextOutA
ExtTextOutW
CreateFontIndirectA
GetObjectA
MoveToEx
advapi32
RegCreateKeyExA
RegCreateKeyExW
RegSetValueExW
RegCloseKey
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
shell32
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHFileOperationW
ShellExecuteA
SHGetMalloc
ole32
CoTaskMemFree
StringFromIID
StringFromGUID2
IIDFromString
CoUninitialize
CoInitialize
CoCreateInstance
oleaut32
SysAllocString
SysFreeString
Exports
Exports
?BindDirectX@CBGame@@QAEJXZ
?IsDirectXBound@CBGame@@QAE_NXZ
Sections
.text Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 365KB - Virtual size: 365KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 80KB - Virtual size: 129KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 331KB - Virtual size: 331KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ