833b0f3f0d691bae0cf3a9e9c11fb75524904b931a3e09559043b66f38449511

Sharing

Copy URL Twitter E-mail

General

Target
833b0f3f0d691bae0cf3a9e9c11fb75524904b931a3e09559043b66f38449511
Size 1.5MB
Sample260825-tz73dssvbv
SHA256 833b0f3f0d691bae0cf3a9e9c11fb75524904b931a3e09559043b66f38449511
MD5 4e1b665d5cb9da64c0623425a64aa193
SHA1 3f90b7c1afec8da11db384123ce1613ee0596bd3
SHA512 81a0b2c787cc3c680a60dbe8dc6503b0ade0b7bbf04c0cca8f8a8f3796ea94d4d82f4520e1a2a15ec5b998cff6e582f374489f31f36d6b5c11ab437eb2162d3c
SSDEEP 24576:siPTHaohHA6ytQ9MdwujqH98op6Ho5LCvF9ibCOvQOAEHEukZfw8ibnwkq:vBABjqHOocqoF9iHvQOF6w+kq
TLSH
T18075AF30B915803AD55A0232463CAFAF853EA614273443DFF7E86C9E9DA86D27739707
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
833b0f3f0d691bae0cf3a9e9c11fb75524904b931a3e09559043b66f38449511

File Explorer

833b0f3f0d691bae0cf3a9e9c11fb75524904b931a3e09559043b66f38449511

.dll 1.5MB

833b0f3f0d691bae0cf3a9e9c11fb75524904b931a3e09559043b66f38449511

IMPHASH 95494c248d3f765c7f72a7c6a2a832fe
SHA256 833b0f3f0d691bae0cf3a9e9c11fb75524904b931a3e09559043b66f38449511
MD5 4e1b665d5cb9da64c0623425a64aa193
SHA1 3f90b7c1afec8da11db384123ce1613ee0596bd3
SHA512 81a0b2c787cc3c680a60dbe8dc6503b0ade0b7bbf04c0cca8f8a8f3796ea94d4d82f4520e1a2a15ec5b998cff6e582f374489f31f36d6b5c11ab437eb2162d3c
SSDEEP 24576:siPTHaohHA6ytQ9MdwujqH98op6Ho5LCvF9ibCOvQOAEHEukZfw8ibnwkq:vBABjqHOocqoF9iHvQOF6w+kq
TLSH
T18075AF30B915803AD55A0232463CAFAF853EA614273443DFF7E86C9E9DA86D27739707
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

844233

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

d:\jk_107\workspace\Module_CRI_MediaLab_PlaySDK_PlaySDK_W_main_windows\code_path\RenderEngine__6587cb\Bin\Win32\RenderEngine.pdb

d3d11

D3D11CreateDevice

dxgi

CreateDXGIFactory1

opengl32

glLineWidth glDrawArrays glDrawElements glGetError wglCreateContext wglGetProcAddress wglDeleteContext wglMakeCurrent glPopMatrix glViewport glClear glPopAttrib glEnable glPopClientAttrib glScissor glMatrixMode wglGetCurrentDC glPixelStorei glTexImage2D glDeleteTextures glTexParameteri glReadPixels glGenTextures glBindTexture glGetIntegerv glPushAttrib glOrtho glGetString glDepthFunc glPushMatrix glDisable glClearColor glPushClientAttrib glFinish glLoadIdentity glBlendFunc glStencilFunc

kernel32

SwitchToThread SignalObjectAndWait WriteConsoleW HeapSize SetEnvironmentVariableA FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP IsValidCodePage GetCurrentThreadId GetModuleHandleA GetCurrentThread CloseHandle RaiseException GetProcAddress InitializeCriticalSectionEx GetLastError DecodePointer DeleteCriticalSection OutputDebugStringA Sleep LoadLibraryExA WaitForSingleObject SetEvent ResetEvent CreateEventA ReadFile WriteFile FindNextFileA FindClose CreateFileA CreateThread FreeLibrary QueryPerformanceCounter GetTickCount VerSetConditionMask VerifyVersionInfoW LoadLibraryA RtlUnwind EncodePointer SetLastError InterlockedPushEntrySList InterlockedFlushSList InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW EnterCriticalSection LeaveCriticalSection GetFileSizeEx HeapAlloc HeapReAlloc HeapFree GetProcessHeap MapViewOfFile UnmapViewOfFile CreateFileMappingA FindFirstFileExA EnumSystemLocalesW GetUserDefaultLCID IsValidLocale FlushFileBuffers SetStdHandle SetThreadPriority GetThreadPriority GetLogicalProcessorInformation CreateTimerQueueTimer ChangeTimerQueueTimer DeleteTimerQueueTimer GetNumaHighestNodeNumber GetProcessAffinityMask SetThreadAffinityMask RegisterWaitForSingleObject UnregisterWait GetThreadTimes FreeLibraryAndExitThread GetVersionExW VirtualAlloc VirtualProtect VirtualFree DuplicateHandle ReleaseSemaphore InterlockedPopEntrySList QueryDepthSList UnregisterWaitEx CreateTimerQueue LoadLibraryW GetModuleFileNameA GetConsoleCP WaitForSingleObjectEx CreateEventW GetModuleHandleW UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW GetCurrentProcessId GetSystemTimeAsFileTime InitializeSListHead TryEnterCriticalSection ReleaseSRWLockExclusive ReleaseSRWLockShared AcquireSRWLockExclusive AcquireSRWLockShared FormatMessageW WideCharToMultiByte MultiByteToWideChar CompareStringW LCMapStringW GetLocaleInfoW GetStringTypeW GetCPInfo OutputDebugStringW CreateFileW GetFileType ExitProcess GetModuleHandleExW GetModuleFileNameW GetACP GetStdHandle SetFilePointerEx GetConsoleMode

user32

GetDesktopWindow GetClientRect ClientToScreen MonitorFromWindow GetMonitorInfoA ReleaseDC FillRect GetDC IsWindow CreateWindowExA DefWindowProcA RegisterClassA DestroyWindow GetSystemMetrics

gdi32

CreateDIBitmap CreateHatchBrush GetStockObject Polyline CreatePen Ellipse TextOutW SetTextColor SetBkMode CreateFontIndirectA GetDeviceCaps DescribePixelFormat ChoosePixelFormat SwapBuffers SetPixelFormat CreateSolidBrush SelectObject CreateCompatibleDC StretchBlt StretchDIBits DeleteDC SetStretchBltMode DeleteObject CreateDIBSection

ddraw

DirectDrawEnumerateExA DirectDrawCreateEx

msimg32

TransparentBlt

RENDER_3DGetCoordScreenTransWorld RENDER_3DGetCoordWorldTransScreen RENDER_3DGetModelRotate RENDER_3DGetModelScale RENDER_3DGetModelTranslate RENDER_3DGetPerspectiveFovy RENDER_3DGetViewMoveDistance RENDER_3DGetViewPoint RENDER_3DResetModel RENDER_3DSetModelRotate RENDER_3DSetModelScale RENDER_3DSetModelTranslate RENDER_3DSetParam RENDER_3DSetPerspectiveFovy RENDER_3DSetViewMode RENDER_3DSetViewMoveDistance RENDER_3DSetViewPoint RENDER_AlgoCommand RENDER_AntiAliasing RENDER_ClearScreen RENDER_ColorAdjust RENDER_Create RENDER_CreateEx RENDER_CreateTextureFromShared RENDER_CreateTextureWithRT RENDER_Destroy RENDER_DestroyTexture RENDER_Draw3DPointCloud RENDER_DrawArc RENDER_DrawArrow RENDER_DrawBitmaps RENDER_DrawCharacters RENDER_DrawCharactersByRect RENDER_DrawCharactersByRectOffScreen RENDER_DrawCompImageWithAlgo RENDER_DrawEllipse RENDER_DrawEllipseWithAlgo RENDER_DrawFanWithAlgo RENDER_DrawImage RENDER_DrawImageEffect RENDER_DrawImageOffScreen RENDER_DrawLines RENDER_DrawPoints RENDER_DrawPolygon RENDER_DrawPolygonWithAlgo RENDER_DrawProfiledWindow RENDER_Flip RENDER_GetAlgoType RENDER_GetCharactersOccupancy RENDER_GetPanoARCoord2DTrans RENDER_GetPanoARCoord3DTrans RENDER_GetRenderDevice RENDER_GetRenderTargetHeight RENDER_GetRenderTargetWidth RENDER_GetRenderType RENDER_GetVersion RENDER_GetViewPort RENDER_GetWinHeight RENDER_GetWinWidth RENDER_MosaicAdjust RENDER_Present RENDER_ResetAdjustColor RENDER_Rotate RENDER_ScreenShot RENDER_SetAlgoParams RENDER_SetElementInfo RENDER_SetFinalTarget RENDER_SetFontInfo RENDER_SetOESTextureCreateCallback RENDER_SetPanoActionAreaCallback RENDER_SetPolygonDrawSync RENDER_SetScissorRect RENDER_SetVideoRenderCallback RENDER_SetViewPort RENDER_SetViewProportion RENDER_UpdateImageEffect RENDER_UpdateTexture RENDER_VerticalSync RENDER_ViewResolutionChanged

Name

.text

Size

1.0MB

Virtual Size

1.0MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

365KB

Virtual Size

364KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

37KB

Virtual Size

82KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

60KB

Virtual Size

59KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

833b0f3f0d691bae0cf3a9e9c11fb75524904b931a3e09559043b66f38449511

d3d11

dxgi

opengl32

kernel32

user32

gdi32

ddraw

msimg32

generic