??0IP2PCore@@QAE@ABV0@@Z
??0IP2PCore@@QAE@XZ
??1IP2PCore@@UAE@XZ
??4IP2PCore@@QAEAAV0@ABV0@@Z
??_7IP2PCore@@6B@
CreateP2PCore
DeleteCore
Static task
static1
Behavioral task
behavioral1
Sample
2f5b08941f9eb75039280f6b18619cf6978f1e2e433b7c00a8e07aa64a637fae.dll
Resource
win7-20220901-en
Target
2f5b08941f9eb75039280f6b18619cf6978f1e2e433b7c00a8e07aa64a637fae
Size
500KB
MD5
2d66294a5f7a41ee043f0c0a9b0a8380
SHA1
f7e3d502cbf8aaedd0cd8d01b9063ed9a98179ad
SHA256
2f5b08941f9eb75039280f6b18619cf6978f1e2e433b7c00a8e07aa64a637fae
SHA512
e132e5aa25a1d263feba36d1be4cc2a27ce6a219555777d5001f4387ecdb7d0a9711dae64de6660822fbf14f348669d5a43e9ca04f50e19b85159bc3324fe8e3
SSDEEP
6144:lNv7aTHbkmR6C0YaaLRqDR2aygBPX42/sRSbSzOABOs1DWJCL:fTaLNwxaLwDR1yiPX4dRCGICL
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
sendto
inet_addr
send
select
htons
setsockopt
bind
inet_ntoa
gethostbyname
gethostname
WSAGetLastError
WSACleanup
ioctlsocket
ntohl
ntohs
recv
socket
closesocket
WSAStartup
recvfrom
connect
__WSAFDIsSet
htonl
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
GetSystemTimeAsFileTime
UnhandledExceptionFilter
CreateFileMappingA
UnmapViewOfFile
MapViewOfFile
OpenFileMappingA
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
lstrlenA
GetLastError
GetModuleHandleA
GetProcAddress
InterlockedExchange
GetModuleFileNameA
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
WaitForSingleObject
CreateEventA
CloseHandle
SetEvent
ResetEvent
GetPrivateProfileStringA
WritePrivateProfileStringA
GetTickCount
GetCurrentThreadId
FreeLibrary
GetLocalTime
LoadLibraryA
Sleep
WaitForMultipleObjects
GlobalAlloc
GetFileAttributesA
GlobalFree
CreateDirectoryA
GetCurrentProcessId
TryEnterCriticalSection
GetLastInputInfo
RegSetValueExA
RegCloseKey
RegCreateKeyA
RegOpenKeyA
RegQueryValueExA
SHGetFolderPathA
CoLoadLibrary
CoFreeLibrary
CoUninitialize
CoCreateGuid
CoInitialize
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?deallocate@?$allocator@D@std@@QAEXPADI@Z
?allocate@?$allocator@D@std@@QAEPADI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?clog@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z
??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
?setbase@std@@YA?AU?$_Smanip@H@1@H@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?setw@std@@YA?AU?$_Smanip@H@1@H@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
?uncaught_exception@std@@YA_NXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHPBDH@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
_CxxThrowException
strtol
memmove
realloc
memcpy_s
_localtime32
strstr
strncmp
atol
?terminate@@YAXXZ
_unlock
__dllonexit
_encode_pointer
_lock
_decode_pointer
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
__clean_type_info_names_internal
__CxxFrameHandler3
memset
memcpy
_onexit
??3@YAXPAX@Z
__RTDynamicCast
??_V@YAXPAX@Z
_purecall
??2@YAPAXI@Z
??1exception@std@@UAE@XZ
srand
??0exception@std@@QAE@XZ
??0exception@std@@QAE@ABV01@@Z
_time32
rand
memmove_s
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABQBD@Z
_invalid_parameter_noinfo
strncat
_snprintf
free
strncpy
malloc
_beginthreadex
sprintf_s
_vsnprintf_s
_mbsrchr
_snprintf_s
_beginthread
_atoi64
isdigit
strchr
clock
??0IP2PCore@@QAE@ABV0@@Z
??0IP2PCore@@QAE@XZ
??1IP2PCore@@UAE@XZ
??4IP2PCore@@QAEAAV0@ABV0@@Z
??_7IP2PCore@@6B@
CreateP2PCore
DeleteCore
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE