37ada66369d8365f9b6d9b0bf3156b17e3dff816195ac50fcb926782415b516c

Sharing

Copy URL Twitter E-mail

General

Target

37ada66369d8365f9b6d9b0bf3156b17e3dff816195ac50fcb926782415b516c
Size

144KB
MD5

21a725f871e7fed1d1dfccf59ceeca74
SHA1

30666980bf68d4e4d482a9be9ab59b40a7dbcbc5
SHA256

37ada66369d8365f9b6d9b0bf3156b17e3dff816195ac50fcb926782415b516c
SHA512

f17abe74f878cb5d72e98437d614bd99330d956c7569b4a4f773c93a7bd0b589a64d869c1d1362156969038ae138a63a1230ec38f5a4587c992c6e49f2867aa4
SSDEEP

3072:6oxMvTCzyuviXvlVqYSzRapkQyINXAg0FuDnLiW+jq8xd:4bCqXvDqYuApJAOj+jq8xd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37ada66369d8365f9b6d9b0bf3156b17e3dff816195ac50fcb926782415b516c

Files

37ada66369d8365f9b6d9b0bf3156b17e3dff816195ac50fcb926782415b516c
.dll windows:6 windows x86 arch:x86

166406875cba554686d82cc06d5c841d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

lua51

lua_pushlightuserdata
luaL_register
lua_objlen
lua_gettable
lua_isnumber
lua_pushinteger
lua_settop
lua_toboolean
lua_getfield
lua_pushstring
lua_touserdata
lua_call
lua_tointeger
lua_pushboolean
lua_tonumber
lua_type

vcomp140

_vcomp_for_static_end
_vcomp_for_static_simple_init
_vcomp_fork
omp_get_max_threads
_vcomp_set_num_threads

kernel32

GetModuleHandleExW
GetProcessHeap
FreeEnvironmentStringsW
DecodePointer
WriteConsoleW
CreateFileW
CloseHandle
HeapReAlloc
HeapSize
GetStringTypeW
SetFilePointerEx
GetFileSizeEx
SetStdHandle
GetConsoleMode
GetConsoleOutputCP
GetEnvironmentStringsW
WriteFile
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
InterlockedFlushSList
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
EncodePointer
RaiseException
ExitProcess
WideCharToMultiByte
GetModuleFileNameW
HeapAlloc
HeapFree
LCMapStringW
GetStdHandle
GetFileType
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
FlushFileBuffers

Exports

Exports

luaopen_DisplacementMapEditor

Sections

.text
Size: 89KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

166406875cba554686d82cc06d5c841d

Headers

DLL Characteristics

File Characteristics

Imports

lua51

vcomp140

kernel32

Exports

Exports

Sections

.text Size: 89KB - Virtual size: 88KB

.rdata Size: 45KB - Virtual size: 44KB

.data Size: 4KB - Virtual size: 6KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 5KB - Virtual size: 4KB

.text
Size: 89KB - Virtual size: 88KB

.rdata
Size: 45KB - Virtual size: 44KB

.data
Size: 4KB - Virtual size: 6KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 5KB - Virtual size: 4KB