94b061b9145d9a90c67bb6065ba7714f949905fb6c89e474f66cf668acffc95c

Sharing

Copy URL Twitter E-mail

General

Target

94b061b9145d9a90c67bb6065ba7714f949905fb6c89e474f66cf668acffc95c
Size

678KB
MD5

807455dd7b74543415ff996518d43086
SHA1

e7003efbb0a7c9167af342d04ea1a94680311c7b
SHA256

94b061b9145d9a90c67bb6065ba7714f949905fb6c89e474f66cf668acffc95c
SHA512

4355886ebe2ade0b125665a4749b49ff6f1f67a2990039b72ae423246f64dec5f9008363356d0627a0f8e82556bedfb6aaee987e4445e2da9ab9e1df33788e61
SSDEEP

3072:vWOg41DdLxbmorexKnIO+2ESdQmU77VcThQhGu9Kpt3RDuQ6bSr1dU14rHUIFstR:vWy1DdEoruKIO+SeevzcpMHCmypjx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
94b061b9145d9a90c67bb6065ba7714f949905fb6c89e474f66cf668acffc95c

Files

94b061b9145d9a90c67bb6065ba7714f949905fb6c89e474f66cf668acffc95c
.dll windows:4 windows x86 arch:x86

38ccf4f894d025c1b78de3eb4248c520

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateDirectoryW
CreateFileW
CreateToolhelp32Snapshot
DeleteCriticalSection
EnterCriticalSection
ExitProcess
FileTimeToSystemTime
FreeLibrary
GetCurrentProcessId
GetEnvironmentVariableW
GetFileAttributesW
GetFileSizeEx
GetFullPathNameW
GetLastError
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetPrivateProfileIntW
GetPrivateProfileStringW
GetProcAddress
GetThreadContext
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
MultiByteToWideChar
OpenThread
OutputDebugStringA
OutputDebugStringW
SetEndOfFile
SetEvent
SetFilePointerEx
SetLastError
SetThreadContext
Sleep
Thread32First
Thread32Next
TlsGetValue
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WideCharToMultiByte

msvcrt

__mb_cur_max
_amsg_exit
_assert
_errno
_initterm
_iob
_lock
_stricmp
_strnicmp
_unlock
_vscprintf
_vsnprintf
_vsnwprintf_s
_wcsdup
_wcsicmp
_wfopen
abort
atoi
calloc
fclose
fgets
fgetwc
fputc
fread
free
fseek
ftell
fwrite
getc
islower
isspace
isupper
iswctype
isxdigit
localeconv
malloc
mbstowcs
mbstowcs_s
memcmp
memcpy
memmove
memset
rand
realloc
setlocale
srand
strchr
strcmp
strcpy_s
strerror
strlen
strncmp
strtol
strtoul
swprintf_s
tolower
towlower
ungetc
ungetwc
vfprintf
time
vswprintf_s
wcscat_s
wcscmp
wcscpy_s
wcslen
wcsncat
wcsncmp
wcsncpy
wcsrchr
wcstol
wcstombs
wcstombs_s
wcstoul
_vsnprintf_s
_wcsicmp
_strdup

shlwapi

PathIsRelativeW

user32

AdjustWindowRect
GetAsyncKeyState
GetClientRect
GetWindowLongW
SetWindowLongW
SetWindowPos
ShowWindow

Exports

Exports

Direct3DCreate9
aime_io_get_api_version
aime_io_init
aime_io_led_set_color
aime_io_nfc_get_aime_id
aime_io_nfc_get_felica_id
aime_io_nfc_poll
amDllVideoClose
amDllVideoGetVBiosVersion
amDllVideoOpen
amDllVideoSetResolution
cxb_io_get_api_version
cxb_io_led_init
cxb_io_led_update
cxb_io_revio_get_coins
cxb_io_revio_init
cxb_io_revio_poll
cxb_io_revio_set_coins

Sections

.text
Size: 157KB - Virtual size: 157KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 452KB - Virtual size: 451KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

/4
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 594B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

38ccf4f894d025c1b78de3eb4248c520

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

shlwapi

user32

Exports

Exports

Sections

.text Size: 157KB - Virtual size: 157KB

.data Size: 452KB - Virtual size: 451KB

.rdata Size: 26KB - Virtual size: 26KB

/4 Size: 26KB - Virtual size: 26KB

.bss Size: - Virtual size: 2KB

.edata Size: 1024B - Virtual size: 594B

.idata Size: 4KB - Virtual size: 3KB

.CRT Size: 512B - Virtual size: 44B

.tls Size: 512B - Virtual size: 8B

.reloc Size: 9KB - Virtual size: 8KB

.text
Size: 157KB - Virtual size: 157KB

.data
Size: 452KB - Virtual size: 451KB

.rdata
Size: 26KB - Virtual size: 26KB

/4
Size: 26KB - Virtual size: 26KB

.bss
Size: - Virtual size: 2KB

.edata
Size: 1024B - Virtual size: 594B

.idata
Size: 4KB - Virtual size: 3KB

.CRT
Size: 512B - Virtual size: 44B

.tls
Size: 512B - Virtual size: 8B

.reloc
Size: 9KB - Virtual size: 8KB