CreatePlugIn
Static task
static1
Behavioral task
behavioral1
Sample
8d7580f8b01151ec2253589ea9c99ddd9c99ac7ff9837379253a65a89ff95930.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
8d7580f8b01151ec2253589ea9c99ddd9c99ac7ff9837379253a65a89ff95930.dll
Resource
win10v2004-20220812-en
General
-
Target
8d7580f8b01151ec2253589ea9c99ddd9c99ac7ff9837379253a65a89ff95930
-
Size
456KB
-
MD5
751fcd18c2919ddf61545909c5508680
-
SHA1
0dd3b9d15f347abf8fb2bc4376e52e1e2ac86797
-
SHA256
8d7580f8b01151ec2253589ea9c99ddd9c99ac7ff9837379253a65a89ff95930
-
SHA512
d4b4e0526371793ccc0d47b995cd98641b8b8fbfdd348640b6bec8e3e94758729c70ffcee0e7dcd8a87fdb4637ce616c34f08ff91a276348309c89de770e4967
-
SSDEEP
6144:PueOl38taiVzsdnUAlFygjD/XkWOg5HqRrBgZY9H76w4CW9i:Pue63IlJPgjD/XkFBCZYVT4z
Malware Config
Signatures
Files
-
8d7580f8b01151ec2253589ea9c99ddd9c99ac7ff9837379253a65a89ff95930.dll windows x86
2ea52bdb71004e39c5dfe1f529170969
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileA
LoadLibraryA
CreateFileA
CloseHandle
GetProcAddress
VirtualAlloc
GlobalSize
GlobalFree
GlobalAlloc
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
UnmapViewOfFile
CreateFileMappingA
MapViewOfFile
WriteFile
ReadFile
SetFilePointer
msvcr80
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
__clean_type_info_names_internal
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
_crt_debugger_hook
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
_malloc_crt
_encode_pointer
realloc
malloc
sprintf
free
asctime
??0exception@std@@QAE@ABV01@@Z
_invalid_parameter_noinfo
isspace
??0exception@std@@QAE@XZ
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABQBD@Z
_localtime32
atoi
srand
sprintf_s
rand
strcpy_s
_time32
memcpy
??_U@YAPAXI@Z
_CxxThrowException
??_V@YAXPAX@Z
_stat32
??2@YAPAXI@Z
__CxxFrameHandler3
_purecall
memset
??3@YAXPAX@Z
toupper
strncpy_s
_splitpath_s
_access
_mbsicmp
strncmp
qsort
fprintf
bsearch
fopen
ftell
fseek
fgets
fread
fclose
atol
strncpy
msvcp80
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
??$?6DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHPBDH@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?uncaught_exception@std@@YA_NXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Unlock@_Mutex@std@@QAEXXZ
?_Lock@_Mutex@std@@QAEXXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
Exports
Exports
Sections
.text Size: 200KB - Virtual size: 197KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 132KB - Virtual size: 130KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 104KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ