AMFCreateComponentInt
Static task
static1
Behavioral task
behavioral1
Sample
1ca184056c4b6a4fa12e7ad73ff92effc956fe67937dacc44f6010335e492f6b.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1ca184056c4b6a4fa12e7ad73ff92effc956fe67937dacc44f6010335e492f6b.dll
Resource
win10v2004-20220812-en
General
-
Target
1ca184056c4b6a4fa12e7ad73ff92effc956fe67937dacc44f6010335e492f6b
-
Size
365KB
-
MD5
802ac32104467a12dd1f51db68067580
-
SHA1
b3d572a75f242cad7b398ec890a200ee80f1f4a0
-
SHA256
1ca184056c4b6a4fa12e7ad73ff92effc956fe67937dacc44f6010335e492f6b
-
SHA512
215b7eda9ca5f4668f66cca2856145609681753c034da281d5bf7c414628e26c54428727ba53b85bf2696a9f38af675fa8ebbf6275f0f67cc6912cf77bdf10ff
-
SSDEEP
6144:OYZXayxVDzVE4gTpmJlaeb5+4/rsJBxME:OYZbFzce5/4nb
Malware Config
Signatures
Files
-
1ca184056c4b6a4fa12e7ad73ff92effc956fe67937dacc44f6010335e492f6b.dll windows x86
af0e1a5795b3b43431641224bbfbc652
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DecodePointer
IsDebuggerPresent
IsProcessorFeaturePresent
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
EncodePointer
amf-core-windesktop32
??0AMFPropertyStorageEx@amf@@QAE@XZ
?IID@AMFSurfaceEx@amf@@SA?BUAMFGuid@2@XZ
?RemoveObserver@AMFPropertyStorageExImpl@amf@@UAGXPAVAMFPropertyStorageObserver@2@@Z
?AddObserver@AMFPropertyStorageExImpl@amf@@UAGXPAVAMFPropertyStorageObserver@2@@Z
?OnPropertyChanged@AMFPropertyStorageExImpl@amf@@UAGXPB_W@Z
?IID@AMFPropertyStorageEx@amf@@SA?BUAMFGuid@2@XZ
??1AMFPropertyStorageEx@amf@@UAE@XZ
?PopulateMemoryTypes@AMFIOCapsImpl@amf@@IAEXHPBW4AMF_MEMORY_TYPE@2@_N@Z
?PopulateSurfaceFormats@AMFIOCapsImpl@amf@@IAEXHPBW4AMF_SURFACE_FORMAT@2@_N@Z
?SetVertAlign@AMFIOCapsImpl@amf@@IAEXH@Z
?SetResolution@AMFIOCapsImpl@amf@@IAEXHHHH@Z
AMFVariantInit
?GetMemoryTypeAt@AMFIOCapsImpl@amf@@UBG?AW4AMF_RESULT@@HPAW4AMF_MEMORY_TYPE@2@PA_N@Z
?GetNumOfMemoryTypes@AMFIOCapsImpl@amf@@UBGHXZ
?GetFormatAt@AMFIOCapsImpl@amf@@UBG?AW4AMF_RESULT@@HPAW4AMF_SURFACE_FORMAT@2@PA_N@Z
?GetNumOfFormats@AMFIOCapsImpl@amf@@UBGHXZ
?GetVertAlign@AMFIOCapsImpl@amf@@UBGHXZ
?GetHeightRange@AMFIOCapsImpl@amf@@UBGXPAH0@Z
?GetWidthRange@AMFIOCapsImpl@amf@@UBGXPAH0@Z
??0AMFIOCapsImpl@amf@@IAE@XZ
?QueryInterface@?$AMFInterfaceImpl@VAMFIOCaps@amf@@@amf@@UAG?AW4AMF_RESULT@@ABUAMFGuid@2@PAPAX@Z
?RefCount@?$AMFInterfaceImpl@VAMFIOCaps@amf@@@amf@@UAGJXZ
?Release@?$AMFInterfaceImpl@VAMFIOCaps@amf@@@amf@@UAGJXZ
?Acquire@?$AMFInterfaceImpl@VAMFIOCaps@amf@@@amf@@UAGJXZ
??1AMFIOCapsImpl@amf@@UAE@XZ
AMFVariantAssignSize
AMFVariantClear
AMFVariantChangeType
AMFVariantAssignPoint
?ms_csMaps@AMFPropertyStorageExImpl@amf@@1VAMFCriticalSection@2@A
??0AMFCriticalSection@amf@@QAE@XZ
??1AMFCriticalSection@amf@@UAE@XZ
??0AMFPropertyStorageExImpl@amf@@QAE@XZ
??1AMFPropertyStorageExImpl@amf@@UAE@XZ
?GetProperty@AMFPropertyStorageExImpl@amf@@UBG?AW4AMF_RESULT@@PB_WPAUAMFVariantStruct@2@@Z
?SetProperty@AMFPropertyStorageExImpl@amf@@UAG?AW4AMF_RESULT@@PB_WUAMFVariantStruct@2@@Z
?Clear@AMFPropertyStorageExImpl@amf@@UAG?AW4AMF_RESULT@@XZ
?AddTo@AMFPropertyStorageExImpl@amf@@UBG?AW4AMF_RESULT@@PAVAMFPropertyStorage@2@_N1@Z
?CopyTo@AMFPropertyStorageExImpl@amf@@UBG?AW4AMF_RESULT@@PAVAMFPropertyStorage@2@_N@Z
?HasProperty@AMFPropertyStorageExImpl@amf@@UBG_NPB_W@Z
?GetPropertyCount@AMFPropertyStorageExImpl@amf@@UBGHXZ
?GetPropertyAt@AMFPropertyStorageExImpl@amf@@UBG?AW4AMF_RESULT@@HPA_WIPAUAMFVariantStruct@2@@Z
?GetPropertiesInfoCount@AMFPropertyStorageExImpl@amf@@UBGIXZ
?GetPropertyInfo@AMFPropertyStorageExImpl@amf@@UBG?AW4AMF_RESULT@@PB_WPAPBUAMFPropertyInfo@2@@Z
?GetPropertyInfo@AMFPropertyStorageExImpl@amf@@UBG?AW4AMF_RESULT@@IPAPBUAMFPropertyInfo@2@@Z
?ValidateProperty@AMFPropertyStorageExImpl@amf@@UBG?AW4AMF_RESULT@@PB_WUAMFVariantStruct@2@PAU42@@Z
?RegisterProperties@AMFPropertyStorageExImpl@amf@@UAG?AW4AMF_RESULT@@PAVAMFPropertyInfoImpl@2@I@Z
AMFVariantAssignColor
?amf_string_formatVA@amf@@YG?AV?$basic_string@_WU?$char_traits@_W@std@@V?$amf_allocator@_W@amf@@@std@@PB_WPAD@Z
AMFVariantAssignInt64
AMFVariantAssignBool
?Get@AMFPerformanceMonitor@amf@@SGAAV12@XZ
??0AMFPropertyInfoImpl@amf@@QAE@PB_W0W4AMF_VARIANT_TYPE@1@IUAMFVariantStruct@1@22_NPBUAMFEnumDescriptionEntry@1@@Z
??1AMFPropertyInfoImpl@amf@@UAE@XZ
??0AMFLock@amf@@QAE@PAVAMFSyncBase@1@K@Z
??1AMFLock@amf@@QAE@XZ
?AMFSurfaceGetFormatName@amf@@YGPB_WW4AMF_SURFACE_FORMAT@1@@Z
?AMFSurfaceGetFormatDescription@amf@@YGPBUAMFSurfaceFormatDescription@1@W4AMF_SURFACE_FORMAT@1@@Z
?Get@AMFProgramsCompute@amf@@SGAAV12@XZ
_amf_alloc@4
?amf_string_format@amf@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$amf_allocator@_W@amf@@@std@@PB_WZZ
AMFTraceW
?AMFGetResultText@amf@@YGPB_WW4AMF_RESULT@@@Z
_amf_atomic_dec@4
_amf_atomic_inc@4
_amf_free@4
?IsInterlacedSupported@AMFIOCapsImpl@amf@@UBG_NXZ
msvcp110
?_Syserror_map@std@@YAPBDH@Z
?_Xbad_alloc@std@@YAXXZ
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
?_Winerror_map@std@@YAPBDH@Z
msvcr110
__crtUnhandledException
_crt_debugger_hook
_initterm_e
_initterm
__crtTerminateProcess
free
_amsg_exit
__CppXcptFilter
??1type_info@@UAE@XZ
_onexit
__dllonexit
_calloc_crt
_unlock
_lock
?terminate@@YAXXZ
??2@YAPAXI@Z
??3@YAXPAX@Z
_purecall
memmove
_except_handler4_common
__clean_type_info_names_internal
_CxxThrowException
__CxxFrameHandler3
floor
_malloc_crt
memcpy
Exports
Exports
Sections
.text Size: 122KB - Virtual size: 122KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 131KB - Virtual size: 131KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 90KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE