ZeonPlugInMain
Static task
static1
Behavioral task
behavioral1
Sample
f259baf934d26aecf82706c5625a597136146472850c2090ee4c7dcf1aea1735.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f259baf934d26aecf82706c5625a597136146472850c2090ee4c7dcf1aea1735.dll
Resource
win10v2004-20220812-en
General
-
Target
f259baf934d26aecf82706c5625a597136146472850c2090ee4c7dcf1aea1735
-
Size
121KB
-
MD5
f89368c51693724cd79ed042a7b719bf
-
SHA1
12522904bee499e64727e1a83df873e667c3eba6
-
SHA256
f259baf934d26aecf82706c5625a597136146472850c2090ee4c7dcf1aea1735
-
SHA512
9145df1ece1270891d7289e5f04721c45897cf07bf7f55c5dabfec2900f020f830a7b448d7627f13e6ccf87dab57c10e9902249220d0f94d457bbc1f0dca2e60
-
SSDEEP
768:jXR99HAHy7D1k/1S52vCZdFr3/kPdNbwkGkja3N+:LR99gHy7W/1S52vCZzr381KkGkjad+
Malware Config
Signatures
Files
-
f259baf934d26aecf82706c5625a597136146472850c2090ee4c7dcf1aea1735.dll windows x86
844edebcb209e86e821576b93f4c5001
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mfc42
ord825
ord3571
ord3626
ord3663
ord1182
ord1253
ord823
ord2450
ord2452
ord5785
ord1641
ord1640
ord342
ord640
ord2414
ord323
ord1168
msvcrt
_initterm
malloc
free
longjmp
__dllonexit
_onexit
__CxxLongjmpUnwind
_setjmp3
__CxxFrameHandler
_adjust_fdiv
user32
GetDC
LoadBitmapA
ReleaseDC
gdi32
CreateCompatibleDC
DeleteObject
GetPixel
zeondata
??0CZeonString@@QAE@PBD@Z
??1CZeonString@@UAE@XZ
??0CZeonString@@QAE@XZ
?Format@CZeonString@@QAAXPADZZ
??0CZeonString@@QAE@ABV0@@Z
??8@YAHABVCZeonString@@0@Z
zui
??0CPDFText@@QAE@AAV0@@Z
?GetAscIIStr@CPDFText@@QAE?AVCZeonString@@XZ
?LoadFromRes@@YA?AVCZeonString@@I@Z
?ZUIGetGlobal@@YAPAVCZUIGlobal@@XZ
??1CPDFText@@UAE@XZ
Exports
Exports
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 96KB - Virtual size: 95KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1022B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ