7658adb89c3b236f667a68b6b38bd33bc6a51392c64d2060e0a24b62dee9672a

Sharing

Copy URL

Twitter E-mail

General

Target

7658adb89c3b236f667a68b6b38bd33bc6a51392c64d2060e0a24b62dee9672a
Size

23KB
MD5

97dc3300ad3fe53cc430f0a06f8cfaaa
SHA1

9fe03e0a9650514f99d37c1c6fbe3e24eed5e077
SHA256

7658adb89c3b236f667a68b6b38bd33bc6a51392c64d2060e0a24b62dee9672a
SHA512

1493e0451ca662f6d373f24832143570854a9247469f6db88980c336456a5300c349486b2d40ee89f02debfbe466cef8e783d8c33a65c6ade8730dd3b0145602
SSDEEP

384:6npybu7QfVJrvu58gES6fChYclyaHDdD7x2twkdwC2Buq8itaJduLck:gifTuh4CmclfHJ7AtwVCofZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7658adb89c3b236f667a68b6b38bd33bc6a51392c64d2060e0a24b62dee9672a

Files

7658adb89c3b236f667a68b6b38bd33bc6a51392c64d2060e0a24b62dee9672a
.dll windows:4 windows x86 arch:x86

cc17ba061a93516096c72bdbc12e7aa9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

sdl

SDL_CreateRGBSurface
SDL_FillRect
SDL_FreeSurface
SDL_GetError
SDL_RWFromFile
SDL_SetColorKey
SDL_SetError

libfreetype-6

FT_Done_Face
FT_Done_FreeType
FT_Done_Glyph
FT_Get_Char_Index
FT_Get_Glyph
FT_Get_Kerning
FT_Glyph_Stroke
FT_Glyph_To_Bitmap
FT_Init_FreeType
FT_Load_Glyph
FT_Open_Face
FT_Outline_Transform
FT_Render_Glyph
FT_Set_Char_Size
FT_Set_Pixel_Sizes
FT_Stroker_Done
FT_Stroker_New
FT_Stroker_Set

kernel32

DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetLastError
GetModuleHandleA
GetProcAddress
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
TlsGetValue
VirtualProtect
VirtualQuery

msvcrt

__dllonexit
_errno
_iob
_winmajor
abort
calloc
ceil
fflush
free
fwrite
malloc
memcpy
vfprintf

Exports

Exports

TTF_ByteSwappedUNICODE
TTF_CloseFont
TTF_FontAscent
TTF_FontDescent
TTF_FontFaceFamilyName
TTF_FontFaceIsFixedWidth
TTF_FontFaceStyleName
TTF_FontFaces
TTF_FontHeight
TTF_FontLineSkip
TTF_GetFontHinting
TTF_GetFontKerning
TTF_GetFontOutline
TTF_GetFontStyle
TTF_GlyphIsProvided
TTF_GlyphMetrics
TTF_Init
TTF_Linked_Version
TTF_OpenFont
TTF_OpenFontIndex
TTF_OpenFontIndexRW
TTF_OpenFontRW
TTF_Quit
TTF_RenderGlyph_Blended
TTF_RenderGlyph_Shaded
TTF_RenderGlyph_Solid
TTF_RenderText_Blended
TTF_RenderText_Shaded
TTF_RenderText_Solid
TTF_RenderUNICODE_Blended
TTF_RenderUNICODE_Shaded
TTF_RenderUNICODE_Solid
TTF_RenderUTF8_Blended
TTF_RenderUTF8_Shaded
TTF_RenderUTF8_Solid
TTF_SetFontHinting
TTF_SetFontKerning
TTF_SetFontOutline
TTF_SetFontStyle
TTF_SizeText
TTF_SizeUNICODE
TTF_SizeUTF8
TTF_WasInit

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 524B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

/4
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 276B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 808B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 468B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cc17ba061a93516096c72bdbc12e7aa9

Headers

File Characteristics

Imports

sdl

libfreetype-6

kernel32

msvcrt

Exports

Exports

Sections

.text Size: 14KB - Virtual size: 14KB

.data Size: 512B - Virtual size: 8B

.rdata Size: 1024B - Virtual size: 524B

/4 Size: 512B - Virtual size: 4B

.bss Size: - Virtual size: 276B

.edata Size: 1KB - Virtual size: 1KB

.idata Size: 2KB - Virtual size: 1KB

.CRT Size: 512B - Virtual size: 24B

.tls Size: 512B - Virtual size: 32B

.rsrc Size: 1024B - Virtual size: 808B

.reloc Size: 512B - Virtual size: 468B

.text
Size: 14KB - Virtual size: 14KB

.data
Size: 512B - Virtual size: 8B

.rdata
Size: 1024B - Virtual size: 524B

/4
Size: 512B - Virtual size: 4B

.bss
Size: - Virtual size: 276B

.edata
Size: 1KB - Virtual size: 1KB

.idata
Size: 2KB - Virtual size: 1KB

.CRT
Size: 512B - Virtual size: 24B

.tls
Size: 512B - Virtual size: 32B

.rsrc
Size: 1024B - Virtual size: 808B

.reloc
Size: 512B - Virtual size: 468B