CreatePlugin
Static task
static1
Behavioral task
behavioral1
Sample
284428f7e8038dc33b84ae6ab82bed7c7f90db9c9e82071c3b56ecd5b7d2514b.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
284428f7e8038dc33b84ae6ab82bed7c7f90db9c9e82071c3b56ecd5b7d2514b.dll
Resource
win10v2004-20220812-en
General
-
Target
284428f7e8038dc33b84ae6ab82bed7c7f90db9c9e82071c3b56ecd5b7d2514b
-
Size
192KB
-
MD5
7c80509b6e3557c5245181ab799053a0
-
SHA1
91247eea4643a05607ca785fd951d249031fe182
-
SHA256
284428f7e8038dc33b84ae6ab82bed7c7f90db9c9e82071c3b56ecd5b7d2514b
-
SHA512
ed727a6a380662b7ecebd6e3ca84d99166ca67639fdc3b6f272d5c328fc1cc47a1f53ce9192b26c013f4a47f569b1c3f728e41ed496c2534856260116249b5e8
-
SSDEEP
3072:R2mXomtDZlfnHxadxTQy8ioOj2iC9AjVl9QKTbEoxzU3oa3dk9D9oj3u:7tDrn2TqbOj2UjZ2R3d29oj3u
Malware Config
Signatures
Files
-
284428f7e8038dc33b84ae6ab82bed7c7f90db9c9e82071c3b56ecd5b7d2514b.dll windows x86
5eef4c8f51bccc775c1cfb89bf7df9b1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
mixerOpen
mixerSetControlDetails
mixerGetControlDetailsW
mixerGetLineControlsW
mixerGetLineInfoW
mixerClose
waveOutUnprepareHeader
waveOutWrite
waveOutReset
waveOutPrepareHeader
waveOutClose
waveOutOpen
waveInAddBuffer
waveInReset
waveInStart
waveInClose
waveInOpen
waveInUnprepareHeader
waveInPrepareHeader
mciSendCommandW
mfc80u
ord5908
ord605
ord3176
ord6720
ord4256
ord4480
ord1542
ord293
ord2856
ord1661
ord5196
ord1662
ord1590
ord2011
ord1646
ord4884
ord1647
ord4729
ord1955
ord4206
ord5171
ord5178
ord1353
ord4961
ord3339
ord6275
ord3796
ord6273
ord776
ord1513
ord2163
ord2169
ord2399
ord3635
ord2381
ord2379
ord2397
ord2409
ord2386
ord4574
ord2402
ord2407
ord2390
ord2392
ord2394
ord2388
ord2404
ord2384
ord931
ord927
ord929
ord925
ord920
ord5229
ord5231
ord5956
ord1591
ord4276
ord4716
ord1472
ord3397
ord5199
ord354
ord4179
ord6271
ord5067
ord290
ord1899
ord5148
ord4238
ord265
ord266
ord1611
ord1608
ord581
ord1200
ord314
ord1170
ord1168
ord1894
ord3940
ord1392
ord774
ord577
ord6086
ord762
ord283
ord4032
ord4008
ord3824
ord6272
ord3795
ord6274
ord4320
ord2054
ord2009
ord5579
ord3800
ord1007
ord757
ord5096
ord566
ord6215
ord5378
ord3826
ord1911
ord2925
ord3677
ord5220
ord5222
ord2239
ord3942
ord4562
ord5226
ord5209
ord5562
ord2531
ord2725
ord2829
ord4301
ord2708
ord2832
ord2534
ord2640
ord2527
ord3712
ord3713
ord3703
ord2638
ord3943
ord4475
ord4255
ord3327
ord764
ord1192
ord1115
ord1162
ord1908
ord371
ord1093
ord1199
ord1197
ord1087
ord1033
ord1079
ord315
ord765
ord6751
ord6700
msvcr80
__clean_type_info_names_internal
_except_handler4_common
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
__CxxFrameHandler3
_CIexp
calloc
free
memmove
exit
memmove_s
_wtoi
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@ABV01@@Z
_invalid_parameter_noinfo
_purecall
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@XZ
floor
_CIsqrt
memcpy
_CxxThrowException
memset
_CIsin
_CIcos
kernel32
SetCommTimeouts
LocalFree
lstrcpynW
FormatMessageW
GetLastError
SetCommState
GetCommState
FreeLibrary
GetProcAddress
LoadLibraryW
ClearCommError
WaitForMultipleObjects
WaitForSingleObject
SetThreadPriority
ResetEvent
CreateFileW
CloseHandle
CreateEventW
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
WriteFile
GetOverlappedResult
CreateThread
InterlockedIncrement
InterlockedDecrement
LocalAlloc
InterlockedExchange
Sleep
InterlockedCompareExchange
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
SetEvent
ReadFile
user32
SendMessageW
GetMessageW
PostThreadMessageW
EnableWindow
KillTimer
SetTimer
msvcp80
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??1locale@std@@QAE@XZ
??0locale@std@@QAE@PBDH@Z
?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@V?$fpos@H@2@@Z
?close@?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBDH@Z
?open@?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXPB_WHH@Z
??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@XZ
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??_D?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?global@locale@std@@SA?AV12@ABV12@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?swap@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXAAV12@@Z
?clear@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??$?8_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_W@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
Exports
Exports
Sections
.text Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 108KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE