390cb5a2fbbfad30ce57f512741b68cc850a3f4ae14288f7e59e8ac46f13d0a5N

Sharing

Copy URL Twitter E-mail

General

Target

390cb5a2fbbfad30ce57f512741b68cc850a3f4ae14288f7e59e8ac46f13d0a5N
Size

1.5MB
MD5

9b92ba20a73da81d841e0a325007d190
SHA1

d547970baa500e027895fd3804a3a83fdb59ef1e
SHA256

390cb5a2fbbfad30ce57f512741b68cc850a3f4ae14288f7e59e8ac46f13d0a5
SHA512

221cdd88c79ac2ca23269255b336691f1480096f201704942655ffb6e4bb3c705d19683c534fcca2e3e51e4e5f7e565af31d763c7a091ebc76d980095b65ca4b
SSDEEP

24576:71gvOl1OZXaRO8OuAvUeH34CCN39e71Qo7FVKyP:Bg2vsXaRNAvmZI1z7FVKyP

Score

1^/10

Malware Config

Signatures

Files

390cb5a2fbbfad30ce57f512741b68cc850a3f4ae14288f7e59e8ac46f13d0a5N
.dll windows:6 windows x86 arch:x86

03481c147305c78ca7cad426e1d07a43

Code Sign

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:09

Not After

14/11/2024, 19:09

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4e:2f:3d:01:40:fc:cc:86:e6:18:68:27:4c:d6:0b:71:cb:47:a7:d0:44:42:39:f7:a5:16:99:cb:7b:9b:4a:d4
Signer

Actual PE Digest

4e:2f:3d:01:40:fc:cc:86:e6:18:68:27:4c:d6:0b:71:cb:47:a7:d0:44:42:39:f7:a5:16:99:cb:7b:9b:4a:d4

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\a\_work\1\s\Intermediate\asan\mt\libomp.vcxproj\objr\x86\Debug\bin\libomp140d.i386.pdb

Imports

kernel32

GetEnvironmentStrings
FreeEnvironmentStringsA
GetEnvironmentVariableA
SetEnvironmentVariableA
GetLastError
GetCurrentProcess
GetCurrentThread
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
FreeLibrary
GetModuleFileNameA
GetModuleHandleExA
LoadLibraryExA
LocalFree
FormatMessageA
FormatMessageW
WideCharToMultiByte
GetThreadLocale
GetStdHandle
WriteFile
SetLastError
AllocConsole
GetConsoleTitleA
GetCurrentThreadId
GetComputerNameA
CloseHandle
DuplicateHandle
SetErrorMode
QueryPerformanceCounter
QueryPerformanceFrequency
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObject
SleepEx
CreateEventA
Sleep
GetProcessTimes
CreateThread
ExitThread
TerminateThread
GetExitCodeThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemInfo
GetSystemDirectoryA
VirtualQuery
GetModuleHandleA
GetProcAddress
SwitchToThread
LoadLibraryA
lstrcmpA
SetEndOfFile
CreateFileW
ReadConsoleW
IsDebuggerPresent
RaiseException
MultiByteToWideChar
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
HeapAlloc
HeapFree
GetProcessHeap
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
GetStartupInfoW
GetModuleHandleW
RtlUnwind
GetModuleFileNameW
LoadLibraryExW
InterlockedFlushSList
EncodePointer
InitializeCriticalSectionAndSpinCount
HeapValidate
GetModuleHandleExW
SetConsoleCtrlHandler
ExitProcess
HeapReAlloc
HeapSize
HeapQueryInformation
GetFileType
OutputDebugStringW
WriteConsoleW
CompareStringW
LCMapStringW
SetFilePointerEx
ReadFile
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetStringTypeW
SetStdHandle
GetFileSizeEx
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
DecodePointer

psapi

EnumProcessModules

Exports

Exports

KMP_ALIGNED_MALLOC
KMP_CALLOC
KMP_CREATE_AFFINITY_MASK
KMP_DESTROY_AFFINITY_MASK
KMP_FREE
KMP_GET_AFFINITY
KMP_GET_AFFINITY_MASK_PROC
KMP_GET_AFFINITY_MAX_PROC
KMP_GET_BLOCKTIME
KMP_GET_CANCELLATION_STATUS
KMP_GET_LIBRARY
KMP_GET_NUM_KNOWN_THREADS
KMP_GET_STACKSIZE
KMP_GET_STACKSIZE_S
KMP_MALLOC
KMP_REALLOC
KMP_SET_AFFINITY
KMP_SET_AFFINITY_MASK_PROC
KMP_SET_BLOCKTIME
KMP_SET_DEFAULTS
KMP_SET_DISP_NUM_BUFFERS
KMP_SET_LIBRARY
KMP_SET_LIBRARY_SERIAL
KMP_SET_LIBRARY_THROUGHPUT
KMP_SET_LIBRARY_TURNAROUND
KMP_SET_STACKSIZE
KMP_SET_STACKSIZE_S
KMP_SET_WARNINGS_OFF
KMP_SET_WARNINGS_ON
KMP_UNSET_AFFINITY_MASK_PROC
OMP_CAPTURE_AFFINITY
OMP_CONTROL_TOOL
OMP_DESTROY_ALLOCATOR
OMP_DESTROY_LOCK
OMP_DESTROY_NEST_LOCK
OMP_DISPLAY_AFFINITY
OMP_DISPLAY_ENV
OMP_FULFILL_EVENT
OMP_GET_ACTIVE_LEVEL
OMP_GET_AFFINITY_FORMAT
OMP_GET_ANCESTOR_THREAD_NUM
OMP_GET_CANCELLATION
OMP_GET_DEFAULT_ALLOCATOR
OMP_GET_DEFAULT_DEVICE
OMP_GET_DEVICE_NUM
OMP_GET_DYNAMIC
OMP_GET_INITIAL_DEVICE
OMP_GET_INTEROP_INT
OMP_GET_INTEROP_PTR
OMP_GET_INTEROP_STR
OMP_GET_LEVEL
OMP_GET_MAX_ACTIVE_LEVELS
OMP_GET_MAX_TASK_PRIORITY
OMP_GET_MAX_TEAMS
OMP_GET_MAX_THREADS
OMP_GET_NESTED
OMP_GET_NUM_DEVICES
OMP_GET_NUM_PLACES
OMP_GET_NUM_PROCS
OMP_GET_NUM_TEAMS
OMP_GET_NUM_THREADS
OMP_GET_PARTITION_NUM_PLACES
OMP_GET_PARTITION_PLACE_NUMS
OMP_GET_PLACE_NUM
OMP_GET_PLACE_NUM_PROCS
OMP_GET_PLACE_PROC_IDS
OMP_GET_PROC_BIND
OMP_GET_SCHEDULE
OMP_GET_SUPPORTED_ACTIVE_LEVELS
OMP_GET_TEAMS_THREAD_LIMIT
OMP_GET_TEAM_NUM
OMP_GET_TEAM_SIZE
OMP_GET_THREAD_LIMIT
OMP_GET_THREAD_NUM
OMP_GET_WTICK
OMP_GET_WTIME
OMP_INIT_ALLOCATOR
OMP_INIT_LOCK
OMP_INIT_LOCK_WITH_HINT
OMP_INIT_NEST_LOCK
OMP_INIT_NEST_LOCK_WITH_HINT
OMP_IN_FINAL
OMP_IN_PARALLEL
OMP_IS_INITIAL_DEVICE
OMP_PAUSE_RESOURCE
OMP_PAUSE_RESOURCE_ALL
OMP_SET_AFFINITY_FORMAT
OMP_SET_DEFAULT_ALLOCATOR
OMP_SET_DEFAULT_DEVICE
OMP_SET_DYNAMIC
OMP_SET_LOCK
OMP_SET_MAX_ACTIVE_LEVELS
OMP_SET_NESTED
OMP_SET_NEST_LOCK
OMP_SET_NUM_TEAMS
OMP_SET_NUM_THREADS
OMP_SET_SCHEDULE
OMP_SET_TEAMS_THREAD_LIMIT
OMP_TEST_LOCK
OMP_TEST_NEST_LOCK
OMP_UNSET_LOCK
OMP_UNSET_NEST_LOCK
_You_must_link_with_Intel_OpenMP_library
_You_must_link_with_exactly_one_OpenMP_library
__kmp_acquire_drdpa_lock
__kmp_acquire_nested_drdpa_lock
__kmp_acquire_nested_queuing_lock
__kmp_acquire_nested_tas_lock
__kmp_acquire_nested_ticket_lock
__kmp_acquire_queuing_lock
__kmp_acquire_tas_lock
__kmp_acquire_ticket_lock
__kmp_fork_call
__kmp_get_reduce_method
__kmp_invoke_microtask
__kmp_launch_worker
__kmp_printf
__kmp_reap_worker
__kmp_release_64
__kmp_wait_4
__kmp_wait_64
__kmpc_aligned_alloc
__kmpc_alloc
__kmpc_atomic_1
__kmpc_atomic_10
__kmpc_atomic_16
__kmpc_atomic_2
__kmpc_atomic_20
__kmpc_atomic_32
__kmpc_atomic_4
__kmpc_atomic_8
__kmpc_atomic_bool_1_cas
__kmpc_atomic_bool_1_cas_cpt
__kmpc_atomic_bool_2_cas
__kmpc_atomic_bool_2_cas_cpt
__kmpc_atomic_bool_4_cas
__kmpc_atomic_bool_4_cas_cpt
__kmpc_atomic_bool_8_cas
__kmpc_atomic_bool_8_cas_cpt
__kmpc_atomic_cmplx10_add
__kmpc_atomic_cmplx10_add_cpt
__kmpc_atomic_cmplx10_div
__kmpc_atomic_cmplx10_div_cpt
__kmpc_atomic_cmplx10_div_cpt_rev
__kmpc_atomic_cmplx10_div_rev
__kmpc_atomic_cmplx10_mul
__kmpc_atomic_cmplx10_mul_cpt
__kmpc_atomic_cmplx10_rd
__kmpc_atomic_cmplx10_sub
__kmpc_atomic_cmplx10_sub_cpt
__kmpc_atomic_cmplx10_sub_cpt_rev
__kmpc_atomic_cmplx10_sub_rev
__kmpc_atomic_cmplx10_swp
__kmpc_atomic_cmplx10_wr
__kmpc_atomic_cmplx4_add
__kmpc_atomic_cmplx4_add_cmplx8
__kmpc_atomic_cmplx4_add_cpt
__kmpc_atomic_cmplx4_div
__kmpc_atomic_cmplx4_div_cmplx8
__kmpc_atomic_cmplx4_div_cpt
__kmpc_atomic_cmplx4_div_cpt_rev
__kmpc_atomic_cmplx4_div_rev
__kmpc_atomic_cmplx4_mul
__kmpc_atomic_cmplx4_mul_cmplx8
__kmpc_atomic_cmplx4_mul_cpt
__kmpc_atomic_cmplx4_rd
__kmpc_atomic_cmplx4_sub
__kmpc_atomic_cmplx4_sub_cmplx8
__kmpc_atomic_cmplx4_sub_cpt
__kmpc_atomic_cmplx4_sub_cpt_rev
__kmpc_atomic_cmplx4_sub_rev
__kmpc_atomic_cmplx4_swp
__kmpc_atomic_cmplx4_wr
__kmpc_atomic_cmplx8_add
__kmpc_atomic_cmplx8_add_cpt
__kmpc_atomic_cmplx8_div
__kmpc_atomic_cmplx8_div_cpt
__kmpc_atomic_cmplx8_div_cpt_rev
__kmpc_atomic_cmplx8_div_rev
__kmpc_atomic_cmplx8_mul
__kmpc_atomic_cmplx8_mul_cpt
__kmpc_atomic_cmplx8_rd
__kmpc_atomic_cmplx8_sub
__kmpc_atomic_cmplx8_sub_cpt
__kmpc_atomic_cmplx8_sub_cpt_rev
__kmpc_atomic_cmplx8_sub_rev
__kmpc_atomic_cmplx8_swp
__kmpc_atomic_cmplx8_wr
__kmpc_atomic_end
__kmpc_atomic_fixed1_add
__kmpc_atomic_fixed1_add_cpt
__kmpc_atomic_fixed1_andb
__kmpc_atomic_fixed1_andb_cpt
__kmpc_atomic_fixed1_andl
__kmpc_atomic_fixed1_andl_cpt
__kmpc_atomic_fixed1_div
__kmpc_atomic_fixed1_div_cpt
__kmpc_atomic_fixed1_div_cpt_rev
__kmpc_atomic_fixed1_div_float8
__kmpc_atomic_fixed1_div_rev
__kmpc_atomic_fixed1_eqv
__kmpc_atomic_fixed1_eqv_cpt
__kmpc_atomic_fixed1_max
__kmpc_atomic_fixed1_max_cpt
__kmpc_atomic_fixed1_min
__kmpc_atomic_fixed1_min_cpt
__kmpc_atomic_fixed1_mul
__kmpc_atomic_fixed1_mul_cpt
__kmpc_atomic_fixed1_mul_float8
__kmpc_atomic_fixed1_neqv
__kmpc_atomic_fixed1_neqv_cpt
__kmpc_atomic_fixed1_orb
__kmpc_atomic_fixed1_orb_cpt
__kmpc_atomic_fixed1_orl
__kmpc_atomic_fixed1_orl_cpt
__kmpc_atomic_fixed1_rd
__kmpc_atomic_fixed1_shl
__kmpc_atomic_fixed1_shl_cpt
__kmpc_atomic_fixed1_shl_cpt_rev
__kmpc_atomic_fixed1_shl_rev
__kmpc_atomic_fixed1_shr
__kmpc_atomic_fixed1_shr_cpt
__kmpc_atomic_fixed1_shr_cpt_rev
__kmpc_atomic_fixed1_shr_rev
__kmpc_atomic_fixed1_sub
__kmpc_atomic_fixed1_sub_cpt
__kmpc_atomic_fixed1_sub_cpt_rev
__kmpc_atomic_fixed1_sub_rev
__kmpc_atomic_fixed1_swp
__kmpc_atomic_fixed1_wr
__kmpc_atomic_fixed1_xor
__kmpc_atomic_fixed1_xor_cpt
__kmpc_atomic_fixed1u_div
__kmpc_atomic_fixed1u_div_cpt
__kmpc_atomic_fixed1u_div_cpt_rev
__kmpc_atomic_fixed1u_div_rev
__kmpc_atomic_fixed1u_shr
__kmpc_atomic_fixed1u_shr_cpt
__kmpc_atomic_fixed1u_shr_cpt_rev
__kmpc_atomic_fixed1u_shr_rev
__kmpc_atomic_fixed2_add
__kmpc_atomic_fixed2_add_cpt
__kmpc_atomic_fixed2_andb
__kmpc_atomic_fixed2_andb_cpt
__kmpc_atomic_fixed2_andl
__kmpc_atomic_fixed2_andl_cpt
__kmpc_atomic_fixed2_div
__kmpc_atomic_fixed2_div_cpt
__kmpc_atomic_fixed2_div_cpt_rev
__kmpc_atomic_fixed2_div_float8
__kmpc_atomic_fixed2_div_rev
__kmpc_atomic_fixed2_eqv
__kmpc_atomic_fixed2_eqv_cpt
__kmpc_atomic_fixed2_max
__kmpc_atomic_fixed2_max_cpt
__kmpc_atomic_fixed2_min
__kmpc_atomic_fixed2_min_cpt
__kmpc_atomic_fixed2_mul
__kmpc_atomic_fixed2_mul_cpt
__kmpc_atomic_fixed2_mul_float8
__kmpc_atomic_fixed2_neqv
__kmpc_atomic_fixed2_neqv_cpt
__kmpc_atomic_fixed2_orb
__kmpc_atomic_fixed2_orb_cpt
__kmpc_atomic_fixed2_orl
__kmpc_atomic_fixed2_orl_cpt
__kmpc_atomic_fixed2_rd
__kmpc_atomic_fixed2_shl
__kmpc_atomic_fixed2_shl_cpt
__kmpc_atomic_fixed2_shl_cpt_rev
__kmpc_atomic_fixed2_shl_rev
__kmpc_atomic_fixed2_shr
__kmpc_atomic_fixed2_shr_cpt
__kmpc_atomic_fixed2_shr_cpt_rev
__kmpc_atomic_fixed2_shr_rev
__kmpc_atomic_fixed2_sub
__kmpc_atomic_fixed2_sub_cpt
__kmpc_atomic_fixed2_sub_cpt_rev
__kmpc_atomic_fixed2_sub_rev
__kmpc_atomic_fixed2_swp
__kmpc_atomic_fixed2_wr
__kmpc_atomic_fixed2_xor
__kmpc_atomic_fixed2_xor_cpt
__kmpc_atomic_fixed2u_div
__kmpc_atomic_fixed2u_div_cpt
__kmpc_atomic_fixed2u_div_cpt_rev
__kmpc_atomic_fixed2u_div_rev
__kmpc_atomic_fixed2u_shr
__kmpc_atomic_fixed2u_shr_cpt
__kmpc_atomic_fixed2u_shr_cpt_rev
__kmpc_atomic_fixed2u_shr_rev
__kmpc_atomic_fixed4_add
__kmpc_atomic_fixed4_add_cpt
__kmpc_atomic_fixed4_andb
__kmpc_atomic_fixed4_andb_cpt
__kmpc_atomic_fixed4_andl
__kmpc_atomic_fixed4_andl_cpt
__kmpc_atomic_fixed4_div
__kmpc_atomic_fixed4_div_cpt
__kmpc_atomic_fixed4_div_cpt_rev
__kmpc_atomic_fixed4_div_float8
__kmpc_atomic_fixed4_div_rev
__kmpc_atomic_fixed4_eqv
__kmpc_atomic_fixed4_eqv_cpt
__kmpc_atomic_fixed4_max
__kmpc_atomic_fixed4_max_cpt
__kmpc_atomic_fixed4_min
__kmpc_atomic_fixed4_min_cpt
__kmpc_atomic_fixed4_mul
__kmpc_atomic_fixed4_mul_cpt
__kmpc_atomic_fixed4_mul_float8
__kmpc_atomic_fixed4_neqv
__kmpc_atomic_fixed4_neqv_cpt
__kmpc_atomic_fixed4_orb
__kmpc_atomic_fixed4_orb_cpt
__kmpc_atomic_fixed4_orl
__kmpc_atomic_fixed4_orl_cpt
__kmpc_atomic_fixed4_rd
__kmpc_atomic_fixed4_shl
__kmpc_atomic_fixed4_shl_cpt
__kmpc_atomic_fixed4_shl_cpt_rev
__kmpc_atomic_fixed4_shl_rev
__kmpc_atomic_fixed4_shr
__kmpc_atomic_fixed4_shr_cpt
__kmpc_atomic_fixed4_shr_cpt_rev
__kmpc_atomic_fixed4_shr_rev
__kmpc_atomic_fixed4_sub
__kmpc_atomic_fixed4_sub_cpt
__kmpc_atomic_fixed4_sub_cpt_rev
__kmpc_atomic_fixed4_sub_rev
__kmpc_atomic_fixed4_swp
__kmpc_atomic_fixed4_wr
__kmpc_atomic_fixed4_xor
__kmpc_atomic_fixed4_xor_cpt
__kmpc_atomic_fixed4u_div
__kmpc_atomic_fixed4u_div_cpt
__kmpc_atomic_fixed4u_div_cpt_rev
__kmpc_atomic_fixed4u_div_rev
__kmpc_atomic_fixed4u_shr
__kmpc_atomic_fixed4u_shr_cpt
__kmpc_atomic_fixed4u_shr_cpt_rev
__kmpc_atomic_fixed4u_shr_rev
__kmpc_atomic_fixed8_add
__kmpc_atomic_fixed8_add_cpt
__kmpc_atomic_fixed8_andb
__kmpc_atomic_fixed8_andb_cpt
__kmpc_atomic_fixed8_andl
__kmpc_atomic_fixed8_andl_cpt
__kmpc_atomic_fixed8_div
__kmpc_atomic_fixed8_div_cpt
__kmpc_atomic_fixed8_div_cpt_rev
__kmpc_atomic_fixed8_div_float8
__kmpc_atomic_fixed8_div_rev
__kmpc_atomic_fixed8_eqv
__kmpc_atomic_fixed8_eqv_cpt
__kmpc_atomic_fixed8_max
__kmpc_atomic_fixed8_max_cpt
__kmpc_atomic_fixed8_min
__kmpc_atomic_fixed8_min_cpt
__kmpc_atomic_fixed8_mul
__kmpc_atomic_fixed8_mul_cpt
__kmpc_atomic_fixed8_mul_float8
__kmpc_atomic_fixed8_neqv
__kmpc_atomic_fixed8_neqv_cpt
__kmpc_atomic_fixed8_orb
__kmpc_atomic_fixed8_orb_cpt
__kmpc_atomic_fixed8_orl
__kmpc_atomic_fixed8_orl_cpt
__kmpc_atomic_fixed8_rd
__kmpc_atomic_fixed8_shl
__kmpc_atomic_fixed8_shl_cpt
__kmpc_atomic_fixed8_shl_cpt_rev
__kmpc_atomic_fixed8_shl_rev
__kmpc_atomic_fixed8_shr
__kmpc_atomic_fixed8_shr_cpt
__kmpc_atomic_fixed8_shr_cpt_rev
__kmpc_atomic_fixed8_shr_rev
__kmpc_atomic_fixed8_sub
__kmpc_atomic_fixed8_sub_cpt
__kmpc_atomic_fixed8_sub_cpt_rev
__kmpc_atomic_fixed8_sub_rev
__kmpc_atomic_fixed8_swp
__kmpc_atomic_fixed8_wr
__kmpc_atomic_fixed8_xor
__kmpc_atomic_fixed8_xor_cpt
__kmpc_atomic_fixed8u_div
__kmpc_atomic_fixed8u_div_cpt
__kmpc_atomic_fixed8u_div_cpt_rev
__kmpc_atomic_fixed8u_div_rev
__kmpc_atomic_fixed8u_shr
__kmpc_atomic_fixed8u_shr_cpt
__kmpc_atomic_fixed8u_shr_cpt_rev
__kmpc_atomic_fixed8u_shr_rev
__kmpc_atomic_float10_add
__kmpc_atomic_float10_add_cpt
__kmpc_atomic_float10_div
__kmpc_atomic_float10_div_cpt
__kmpc_atomic_float10_div_cpt_rev
__kmpc_atomic_float10_div_rev
__kmpc_atomic_float10_max
__kmpc_atomic_float10_max_cpt
__kmpc_atomic_float10_min
__kmpc_atomic_float10_min_cpt
__kmpc_atomic_float10_mul
__kmpc_atomic_float10_mul_cpt
__kmpc_atomic_float10_rd
__kmpc_atomic_float10_sub
__kmpc_atomic_float10_sub_cpt
__kmpc_atomic_float10_sub_cpt_rev
__kmpc_atomic_float10_sub_rev
__kmpc_atomic_float10_swp
__kmpc_atomic_float10_wr
__kmpc_atomic_float4_add
__kmpc_atomic_float4_add_cpt
__kmpc_atomic_float4_add_float8
__kmpc_atomic_float4_div
__kmpc_atomic_float4_div_cpt
__kmpc_atomic_float4_div_cpt_rev
__kmpc_atomic_float4_div_float8
__kmpc_atomic_float4_div_rev
__kmpc_atomic_float4_max
__kmpc_atomic_float4_max_cpt
__kmpc_atomic_float4_min
__kmpc_atomic_float4_min_cpt
__kmpc_atomic_float4_mul
__kmpc_atomic_float4_mul_cpt
__kmpc_atomic_float4_mul_float8
__kmpc_atomic_float4_rd
__kmpc_atomic_float4_sub
__kmpc_atomic_float4_sub_cpt
__kmpc_atomic_float4_sub_cpt_rev
__kmpc_atomic_float4_sub_float8
__kmpc_atomic_float4_sub_rev
__kmpc_atomic_float4_swp
__kmpc_atomic_float4_wr
__kmpc_atomic_float8_add
__kmpc_atomic_float8_add_cpt
__kmpc_atomic_float8_div
__kmpc_atomic_float8_div_cpt
__kmpc_atomic_float8_div_cpt_rev
__kmpc_atomic_float8_div_rev
__kmpc_atomic_float8_max
__kmpc_atomic_float8_max_cpt
__kmpc_atomic_float8_min
__kmpc_atomic_float8_min_cpt
__kmpc_atomic_float8_mul
__kmpc_atomic_float8_mul_cpt
__kmpc_atomic_float8_rd
__kmpc_atomic_float8_sub
__kmpc_atomic_float8_sub_cpt
__kmpc_atomic_float8_sub_cpt_rev
__kmpc_atomic_float8_sub_rev
__kmpc_atomic_float8_swp
__kmpc_atomic_float8_wr
__kmpc_atomic_start
__kmpc_atomic_val_1_cas
__kmpc_atomic_val_1_cas_cpt
__kmpc_atomic_val_2_cas
__kmpc_atomic_val_2_cas_cpt
__kmpc_atomic_val_4_cas
__kmpc_atomic_val_4_cas_cpt
__kmpc_atomic_val_8_cas
__kmpc_atomic_val_8_cas_cpt
__kmpc_barrier
__kmpc_barrier_master
__kmpc_barrier_master_nowait
__kmpc_begin
__kmpc_bound_num_threads
__kmpc_bound_thread_num
__kmpc_calc_original_ivs_rectang
__kmpc_calloc
__kmpc_cancel
__kmpc_cancel_barrier
__kmpc_cancellationpoint
__kmpc_copyprivate
__kmpc_copyprivate_light
__kmpc_critical
__kmpc_critical_with_hint
__kmpc_destroy_allocator
__kmpc_destroy_lock
__kmpc_destroy_nest_lock
__kmpc_dispatch_fini_4
__kmpc_dispatch_fini_4u
__kmpc_dispatch_fini_8
__kmpc_dispatch_fini_8u
__kmpc_dispatch_init_4
__kmpc_dispatch_init_4u
__kmpc_dispatch_init_8
__kmpc_dispatch_init_8u
__kmpc_dispatch_next_4
__kmpc_dispatch_next_4u
__kmpc_dispatch_next_8
__kmpc_dispatch_next_8u
__kmpc_dist_dispatch_init_4
__kmpc_dist_dispatch_init_4u
__kmpc_dist_dispatch_init_8
__kmpc_dist_dispatch_init_8u
__kmpc_dist_for_static_init_4
__kmpc_dist_for_static_init_4u
__kmpc_dist_for_static_init_8

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 422KB - Virtual size: 421KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 53KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

03481c147305c78ca7cad426e1d07a43

Code Sign

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:afCertificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

4e:2f:3d:01:40:fc:cc:86:e6:18:68:27:4c:d6:0b:71:cb:47:a7:d0:44:42:39:f7:a5:16:99:cb:7b:9b:4a:d4Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

psapi

Exports

Exports

Sections

.text Size: 1.1MB - Virtual size: 1.1MB

.rdata Size: 422KB - Virtual size: 421KB

.data Size: 13KB - Virtual size: 36KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 53KB - Virtual size: 52KB

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

4e:2f:3d:01:40:fc:cc:86:e6:18:68:27:4c:d6:0b:71:cb:47:a7:d0:44:42:39:f7:a5:16:99:cb:7b:9b:4a:d4
Signer

.text
Size: 1.1MB - Virtual size: 1.1MB

.rdata
Size: 422KB - Virtual size: 421KB

.data
Size: 13KB - Virtual size: 36KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 53KB - Virtual size: 52KB