5dd75b2562abd9af2139234a051d9d9dce4b7d886f5ee8470f5334880f6d96ed

Sharing

Copy URL Twitter E-mail

General

Target

5dd75b2562abd9af2139234a051d9d9dce4b7d886f5ee8470f5334880f6d96ed
Size

192KB
MD5

40b0edc8aa4199c2e14bffcfdb983912
SHA1

0c5b8a209c5c9bba975beb51c4dac734db0bb26d
SHA256

5dd75b2562abd9af2139234a051d9d9dce4b7d886f5ee8470f5334880f6d96ed
SHA512

f02f00c55ed857a2385f8bf4ab0d9862168b14262c841b22e302f150699eb3e4eb02846e0645eeb55ac40822fd7f8f657251a4e5f14dd73943a49740853c1d2d
SSDEEP

3072:M81scdppuJONEszv/plMR1uAgXSDgvbqez1B+7uYj+f0owBAZntctA6VS3xc:jdnu7Wv/pNSMvm0Wlj00GnQA6V8c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5dd75b2562abd9af2139234a051d9d9dce4b7d886f5ee8470f5334880f6d96ed

Files

5dd75b2562abd9af2139234a051d9d9dce4b7d886f5ee8470f5334880f6d96ed
.dll windows:6 windows x64 arch:x64

3c318b9f15ca880e450adde1c13a5511

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\assemblage_aaai_code\Builds\4116759271786074644btczzsebei\Universal OpenGL 2 Kiero Hook\assemblage_outdir_bin\Universal OpenGL 2 Kiero Hook.pdb

Imports

opengl32

wglGetCurrentContext
glGetIntegerv
glPushAttrib
glOrtho
glPixelStorei
wglCreateContext
glViewport
glEnableClientState
glPopAttrib
glPolygonMode
glBindTexture
glGenTextures
wglMakeCurrent
glEnable
glScissor
glDisableClientState
glMatrixMode
glBlendFunc
glLoadIdentity
glTexParameteri
glTexCoordPointer
glGetTexEnviv
glTexImage2D
glColorPointer
glTexEnvi
glDrawElements
glVertexPointer
glPopMatrix
glDisable
glPushMatrix
glShadeModel

kernel32

CreateEventW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetSystemTimeAsFileTime
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
UnhandledExceptionFilter
CloseHandle
InitializeSListHead
OpenThread
SetThreadContext
FlushInstructionCache
GetCurrentProcessId
GetThreadContext
HeapAlloc
DisableThreadLibraryCalls
MultiByteToWideChar
GlobalAlloc
GlobalFree
GlobalLock
WideCharToMultiByte
GlobalUnlock
LoadLibraryA
QueryPerformanceFrequency
GetProcAddress
QueryPerformanceCounter
GetModuleHandleA
GetModuleHandleW
VirtualFree
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapCreate
VirtualProtect
HeapFree
GetCurrentProcess
Thread32Next
Thread32First
GetCurrentThreadId
SuspendThread
ResumeThread
CreateToolhelp32Snapshot
Sleep
HeapReAlloc

user32

CreateWindowExW
DestroyWindow
DefWindowProcW
UnregisterClassW
RegisterClassExW
SetWindowLongPtrW
WindowFromDC
GetKeyState
ScreenToClient
GetCapture
ClientToScreen
IsChild
GetForegroundWindow
LoadCursorW
SetCapture
SetCursor
GetClientRect
ReleaseCapture
SetCursorPos
GetCursorPos
OpenClipboard
CloseClipboard
EmptyClipboard
GetClipboardData
SetClipboardData
CallWindowProcW

msvcp140

?_Xbad_function_call@std@@YAXXZ

imm32

ImmSetCompositionWindow
ImmGetContext
ImmReleaseContext

vcruntime140_1

__CxxFrameHandler4

vcruntime140

memcpy
memcmp
memchr
memset
__std_type_info_destroy_list
memmove
__C_specific_handler
__current_exception_context
__current_exception
strstr

api-ms-win-crt-runtime-l1-1-0

_initterm_e
terminate
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initterm
_initialize_onexit_table
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function

api-ms-win-crt-stdio-l1-1-0

fflush
fclose
fseek
__stdio_common_vsscanf
fread
__stdio_common_vsprintf
_wfopen
fwrite
ftell

api-ms-win-crt-string-l1-1-0

strcmp

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-heap-l1-1-0

calloc
free
malloc

api-ms-win-crt-math-l1-1-0

sinf
sqrtf
acosf
floorf
cosf
ceilf

Sections

.text
Size: 145KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 196B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3c318b9f15ca880e450adde1c13a5511

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

opengl32

kernel32

user32

msvcp140

imm32

vcruntime140_1

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

Sections

.text Size: 145KB - Virtual size: 144KB

.rdata Size: 37KB - Virtual size: 37KB

.data Size: 1024B - Virtual size: 3KB

.pdata Size: 7KB - Virtual size: 6KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 512B - Virtual size: 196B

.text
Size: 145KB - Virtual size: 144KB

.rdata
Size: 37KB - Virtual size: 37KB

.data
Size: 1024B - Virtual size: 3KB

.pdata
Size: 7KB - Virtual size: 6KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 512B - Virtual size: 196B