ttpGetSoundAddIn
Static task
static1
Behavioral task
behavioral1
Sample
426ddc64ba15bc07d2820d3ad59053f29a31cf99c46c4aeb5692115900b91af8.dll
Resource
win7-20220812-en
General
-
Target
426ddc64ba15bc07d2820d3ad59053f29a31cf99c46c4aeb5692115900b91af8
-
Size
94KB
-
MD5
43c9f0aa999a60d384648bd1c8817e80
-
SHA1
e9db5bae5d8a0deddcd52180f6eb37a986bb2d62
-
SHA256
426ddc64ba15bc07d2820d3ad59053f29a31cf99c46c4aeb5692115900b91af8
-
SHA512
158d4c26f70ed273250ed4b483683c78182eab2c25134a0b65dea97b713f1dc3a2a0056364ecca7f5ee4a512531d4ff3e647c9ae2b497cef787b50be75de1c7e
-
SSDEEP
1536:U5yZnXWIkubBhfMMiZLw5hZoFkUA11Le4e1CYnL1ZRFXjJw:fnXWIdkDZ8DZoFuYL1pjJw
Malware Config
Signatures
Files
-
426ddc64ba15bc07d2820d3ad59053f29a31cf99c46c4aeb5692115900b91af8.dll windows x86
b27e27d69f3c10df86f4267720f3b503
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpyA
lstrlenA
lstrcatA
LoadLibraryA
CopyFileA
GetSystemDirectoryA
MulDiv
FreeLibrary
OutputDebugStringA
ResetEvent
SetEvent
VirtualFree
VirtualAlloc
GetSystemInfo
GetModuleFileNameA
MultiByteToWideChar
CreateEventA
CloseHandle
GetFileAttributesA
lstrlenW
GetFileAttributesW
GetVersion
GetModuleHandleA
DisableThreadLibraryCalls
FindResourceA
SizeofResource
LockResource
LoadResource
GetProcAddress
InterlockedIncrement
InterlockedDecrement
WideCharToMultiByte
user32
wsprintfA
CharNextA
advapi32
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
shell32
SHGetSpecialFolderPathA
ole32
CoTaskMemFree
CoTaskMemAlloc
msvcrt
strcmp
_strnicmp
_adjust_fdiv
_initterm
??1type_info@@UAE@XZ
memset
memcmp
??3@YAXPAX@Z
_mbsrchr
malloc
free
memcpy
memmove
_except_handler3
_CxxThrowException
??2@YAPAXI@Z
strncmp
_stricmp
_mbscmp
_wtoi
strncpy
wcscmp
realloc
wcslen
strlen
vswprintf
__CxxFrameHandler
wcsstr
_purecall
Exports
Exports
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 320B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rmnet Size: 56KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE