1639be53a4ab201c9607c84d167a0cd531e5ebd45f47c5085d53c44a445ffc3eN

Sharing

Copy URL Twitter E-mail

General

Target

1639be53a4ab201c9607c84d167a0cd531e5ebd45f47c5085d53c44a445ffc3eN
Size

19KB
MD5

8ee36393da3ca0464d9a80623b96e9e0
SHA1

be7e8b08663ecb828500e147f5a0f83efbabf470
SHA256

1639be53a4ab201c9607c84d167a0cd531e5ebd45f47c5085d53c44a445ffc3e
SHA512

0e3f9258fddcdfd8e96cfef0c84bc4d6cd47cce364c81052b6237a3ff248f5bedcf7a7af8768d3bba31ff53746045e9c76c5812fb253e607fa99f36807a8e7c4
SSDEEP

384:TClZEmJKfAZYV9vZDmWUqy93+eGYUm5oJbgHXZ6TiOGTcxbrT:TClZERVNZDTm93+4Um5aKXZJfyfT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1639be53a4ab201c9607c84d167a0cd531e5ebd45f47c5085d53c44a445ffc3eN

Files

1639be53a4ab201c9607c84d167a0cd531e5ebd45f47c5085d53c44a445ffc3eN
.dll windows:4 windows x86 arch:x86

0b4b81b5d1b3b1404c4d58316ec55f94

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

AddAtomA
FindAtomA
GetAtomNameA

msvcrt

__dllonexit
_assert
_errno
abort
ceil
fflush
free
malloc
memcpy
memset
strlen

sdl

SDL_CreateRGBSurface
SDL_FillRect
SDL_FreeSurface
SDL_GetError
SDL_RWFromFile
SDL_SetColorKey
SDL_SetError

libfreetype-6

FT_Done_Face
FT_Done_FreeType
FT_Get_Char_Index
FT_Get_Kerning
FT_Init_FreeType
FT_Load_Glyph
FT_MulFix
FT_Open_Face
FT_Outline_Transform
FT_Render_Glyph
FT_Set_Char_Size
FT_Set_Pixel_Sizes

Exports

Exports

TTF_ByteSwappedUNICODE
TTF_CloseFont
TTF_FontAscent
TTF_FontDescent
TTF_FontFaceFamilyName
TTF_FontFaceIsFixedWidth
TTF_FontFaceStyleName
TTF_FontFaces
TTF_FontHeight
TTF_FontLineSkip
TTF_GetFontStyle
TTF_GlyphMetrics
TTF_Init
TTF_Linked_Version
TTF_OpenFont
TTF_OpenFontIndex
TTF_OpenFontIndexRW
TTF_OpenFontRW
TTF_Quit
TTF_RenderGlyph_Blended
TTF_RenderGlyph_Shaded
TTF_RenderGlyph_Solid
TTF_RenderText_Blended
TTF_RenderText_Shaded
TTF_RenderText_Solid
TTF_RenderUNICODE_Blended
TTF_RenderUNICODE_Shaded
TTF_RenderUNICODE_Solid
TTF_RenderUTF8_Blended
TTF_RenderUTF8_Shaded
TTF_RenderUTF8_Solid
TTF_SetFontStyle
TTF_SizeText
TTF_SizeUNICODE
TTF_SizeUTF8
TTF_WasInit

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 260B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 808B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 336B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0b4b81b5d1b3b1404c4d58316ec55f94

Headers

File Characteristics

Imports

kernel32

msvcrt

sdl

libfreetype-6

Exports

Exports

Sections

.text Size: 12KB - Virtual size: 12KB

.data Size: 512B - Virtual size: 36B

.rdata Size: 512B - Virtual size: 384B

.bss Size: - Virtual size: 260B

.edata Size: 1KB - Virtual size: 1KB

.idata Size: 1KB - Virtual size: 1KB

.rsrc Size: 1024B - Virtual size: 808B

.reloc Size: 512B - Virtual size: 336B

.text
Size: 12KB - Virtual size: 12KB

.data
Size: 512B - Virtual size: 36B

.rdata
Size: 512B - Virtual size: 384B

.bss
Size: - Virtual size: 260B

.edata
Size: 1KB - Virtual size: 1KB

.idata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 1024B - Virtual size: 808B

.reloc
Size: 512B - Virtual size: 336B