CreatePlugin
Static task
static1
Behavioral task
behavioral1
Sample
ea302e6c51e616deabd312dc970c921abe90ea9e35ffea6d43d3597767b44d37.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ea302e6c51e616deabd312dc970c921abe90ea9e35ffea6d43d3597767b44d37.dll
Resource
win10v2004-20220812-en
General
-
Target
ea302e6c51e616deabd312dc970c921abe90ea9e35ffea6d43d3597767b44d37
-
Size
696KB
-
MD5
7b23c091bafa5084e7fe57082d633822
-
SHA1
23869388c555a439691ba4a2997a99a4bbf63ca6
-
SHA256
ea302e6c51e616deabd312dc970c921abe90ea9e35ffea6d43d3597767b44d37
-
SHA512
176cf303a61ba28dacdf7f6968fdd736349681a1cefa5ad1acf1f59b5d41107e844d33ad1e41890bf63c509fad9c475ae7b20c3fa858d335126328edac4d6890
-
SSDEEP
12288:yaM99EUfNzxc3I/8IzYL6ufWquuFcWyrPAs/RGWUmor03P:DUpm3bIziuo0rkmoQ3P
Malware Config
Signatures
Files
-
ea302e6c51e616deabd312dc970c921abe90ea9e35ffea6d43d3597767b44d37.dll windows x86
4879909de5dc6f706f6826e2df6e1cf8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
u3dapi10
?writeHiddenString@CCookie@u3@@QAE?AW4STATUS@musk@@PB_W00@Z
??0CDomainsContainer@musk@@QAE@XZ
?getDomains@CConfigService@u3@@QBE?AW4STATUS@musk@@AAVCDomainsContainer@4@@Z
?getDomainsNum@CDomainsContainer@musk@@QBEIXZ
??ACDomainsContainer@musk@@QAEAAVCDomainConfiguration@1@I@Z
?readHiddenString@CCookie@u3@@QBE?AW4STATUS@musk@@PB_W0PA_WAAH@Z
?getDomainType@CDomainConfiguration@musk@@QBE?AW4domain_t@2@XZ
?getDomainSize@CDomainConfiguration@musk@@QBE_KXZ
?getAreaSizes@CPrivateArea@u3@@QBE?AW4STATUS@musk@@ABVCDomainAddress@4@AA_K1@Z
?getMountPoint@CDomainConfiguration@musk@@QBEPB_WXZ
??1CDomainsContainer@musk@@QAE@XZ
??4CPrivateArea@u3@@QAEAAV01@ABV01@@Z
??4CConfigService@u3@@QAEAAV01@ABV01@@Z
??0CConfigService@u3@@QAE@PAVCUFDImpl@musk@@@Z
??1CPathInfoVector@musk@@UAE@XZ
?at@CPathInfoVector@musk@@QAEABUpath_info_t@12@I@Z
?size@CPathInfoVector@musk@@QBEIXZ
?getPathInfoVector@CUFD@musk@@QBE?AW4STATUS@2@AAVCPathInfoVector@2@@Z
??0CPathInfoVector@musk@@QAE@XZ
?getPathStrings@CUFD@musk@@QBE?AW4STATUS@2@PA_WAAH@Z
??4CCookie@u3@@QAEAAV01@ABV01@@Z
??0CConfigService@u3@@QAE@ABV01@@Z
??1CConfigService@u3@@UAE@XZ
??0CPrivateArea@u3@@QAE@PAVCUFDImpl@musk@@@Z
??0CPrivateArea@u3@@QAE@XZ
??0CPrivateArea@u3@@QAE@ABV01@@Z
??1CPrivateArea@u3@@UAE@XZ
??0CDomainAddress@musk@@QAE@ABVCDomainConfiguration@1@@Z
?getPrivateAreaConfiguration@CPrivateArea@u3@@QBE?AW4STATUS@musk@@ABVCDomainAddress@4@AAURemovableInfo@private_area@4@@Z
??1CDomainAddress@musk@@QAE@XZ
??1CDomainConfiguration@musk@@QAE@XZ
?readHiddenInt@CCookie@u3@@QBE?AW4STATUS@musk@@PB_W0AAH@Z
??0CCookie@u3@@QAE@PAVCUFDImpl@musk@@@Z
??0CCookie@u3@@QAE@XZ
??0CCookie@u3@@QAE@ABV01@@Z
??1CCookie@u3@@UAE@XZ
??0CUFD@musk@@QAE@XZ
?getCUFD@WMListening@musk@@SAPBVCUFD@2@I@Z
?getSerialNumber@CUFD@musk@@QBE?AW4STATUS@2@PA_WAAI@Z
??4CUFD@musk@@QAEAAV01@ABV01@@Z
?removeListener@WMListening@musk@@SAXPAUHWND__@@@Z
?fini@SDK@musk@@SAXXZ
?init@SDK@musk@@SA?AW4STATUS@2@ABHK@Z
?addListener@WMListening@musk@@SAXPAUHWND__@@PAVCFilterDeviceParams@2@@Z
??0CUFD@musk@@QAE@ABV01@@Z
??0CDomainConfiguration@musk@@QAE@ABV01@@Z
??1CUFD@musk@@QAE@XZ
kernel32
SetLastError
GetVersionExA
lstrcmpW
lstrcatW
LoadLibraryA
GetModuleHandleA
GlobalDeleteAtom
GlobalFindAtomW
GlobalAddAtomW
FindClose
FindNextFileW
FileTimeToSystemTime
FileTimeToLocalFileTime
FindFirstFileW
InterlockedIncrement
InterlockedDecrement
GetLocaleInfoW
EnumResourceLanguagesW
GetVersion
ConvertDefaultLocale
GetCurrentThread
LocalAlloc
GlobalReAlloc
GlobalHandle
TlsGetValue
TlsAlloc
TlsSetValue
MulDiv
TlsFree
SetErrorMode
GlobalFlags
WritePrivateProfileStringW
GetCurrentDirectoryW
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
GetFileSize
GetFullPathNameW
GetShortPathNameW
RtlUnwind
ExitProcess
HeapFree
HeapReAlloc
HeapAlloc
GetCommandLineA
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapSize
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
GetModuleFileNameA
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
UnhandledExceptionFilter
GetTimeZoneInformation
IsBadReadPtr
IsBadCodePtr
GetOEMCP
GetCPInfo
GetStringTypeA
GetStringTypeW
CompareStringA
CompareStringW
SetEnvironmentVariableA
SetStdHandle
GetDriveTypeA
FormatMessageW
lstrcpynW
LocalFree
OutputDebugStringW
CreateFileW
LeaveCriticalSection
EnterCriticalSection
lstrlenW
lstrlenA
GetCurrentProcess
WideCharToMultiByte
FreeResource
GlobalAlloc
GlobalFree
GlobalUnlock
GlobalLock
DeleteCriticalSection
InitializeCriticalSection
RaiseException
lstrcpyW
GetModuleFileNameW
CreateEventW
SetEvent
GetLastError
GetModuleHandleW
GetProcAddress
LoadLibraryW
FreeLibrary
VerSetConditionMask
VerifyVersionInfoW
GetExitCodeProcess
TerminateProcess
GetCurrentProcessId
Sleep
GetCurrentThreadId
CreateDirectoryW
SetFileAttributesW
DeleteFileW
CopyFileW
CreateProcessW
MultiByteToWideChar
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetVersionExW
CloseHandle
lstrcmpiW
FindResourceW
LoadResource
LockResource
SizeofResource
FindResourceExW
GetSystemDefaultLangID
GetUserDefaultLangID
EnumSystemLocalesW
LocalReAlloc
user32
IsDialogMessageW
SetWindowTextW
MoveWindow
ShowWindow
IsWindowEnabled
GetMenuCheckMarkDimensions
CheckMenuItem
ModifyMenuW
SetMenuItemBitmaps
TabbedTextOutW
DrawTextW
DrawTextExW
GrayStringW
BeginPaint
EndPaint
wsprintfW
EndDialog
GetNextDlgTabItem
CreateDialogIndirectParamW
GetActiveWindow
ValidateRect
GetCursorPos
GetMessageW
InflateRect
DestroyMenu
WindowFromPoint
SetCursor
GetSysColorBrush
DestroyIcon
GetClassLongW
SetPropW
GetPropW
RemovePropW
SendDlgItemMessageW
SendDlgItemMessageA
SetFocus
GetWindowTextLengthW
GetLastActivePopup
SetActiveWindow
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
LoadIconW
MessageBoxW
TrackPopupMenu
GetKeyState
IsWindowVisible
GetMenu
GetSysColor
AdjustWindowRectEx
ScreenToClient
GetClassInfoW
RegisterClassW
GetDlgCtrlID
CallWindowProcW
OffsetRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
PtInRect
GetMenuState
GetMenuItemID
DefWindowProcW
GetWindowLongW
SetWindowLongW
KillTimer
IntersectRect
CopyRect
UnregisterClassW
LoadBitmapW
MsgWaitForMultipleObjects
PeekMessageW
TranslateMessage
DispatchMessageW
PostQuitMessage
IsWindow
UpdateWindow
RegisterWindowMessageW
ReleaseCapture
GetSystemMetrics
EnumWindows
LoadCursorW
SystemParametersInfoW
SetCapture
SetTimer
ClientToScreen
GetClientRect
GetWindowRect
BringWindowToTop
PostMessageW
LoadMenuW
RemoveMenu
InsertMenuW
GetSubMenu
GetMenuItemCount
EnableMenuItem
EqualRect
IsRectEmpty
GetWindow
SetWindowPos
CreateWindowExW
ReleaseDC
GetDC
GetFocus
GetForegroundWindow
GetWindowThreadProcessId
AttachThreadInput
SetForegroundWindow
SendMessageW
GetParent
MapWindowPoints
EnableWindow
GetDesktopWindow
EnumChildWindows
GetClassNameW
GetWindowTextW
DrawIcon
SetWindowRgn
InvalidateRect
WinHelpW
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassInfoExW
RedrawWindow
FrameRect
DrawEdge
DrawFocusRect
LoadImageW
DrawStateW
SetLayeredWindowAttributes
gdi32
CreateRectRgn
CreateCompatibleDC
GetMapMode
BitBlt
GetPixel
StretchDIBits
GetDeviceCaps
GetClipBox
SetTextColor
SetBkColor
SaveDC
RestoreDC
SetBkMode
SetMapMode
PtVisible
RectVisible
TextOutW
ExtTextOutW
Escape
CreateBitmap
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
CreateCompatibleBitmap
DeleteDC
GetStockObject
CreateSolidBrush
CombineRgn
PatBlt
DPtoLP
SetTextAlign
GetTextExtentPoint32W
OffsetWindowOrgEx
SetWindowOrgEx
DeleteObject
GetObjectW
GetBkColor
LPtoDP
GetViewportOrgEx
SelectObject
CreateFontIndirectW
winspool.drv
DocumentPropertiesW
ClosePrinter
OpenPrinterW
advapi32
RegCreateKeyExW
RegSetValueExW
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
RegOpenKeyW
RegSetValueW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegDeleteValueW
shell32
ExtractIconW
comctl32
ord17
_TrackMouseEvent
shlwapi
PathFindFileNameW
PathFindExtensionW
ole32
CoTaskMemFree
CoCreateInstance
CoDisconnectObject
CoRevokeClassObject
CoInitialize
CoRegisterClassObject
StringFromCLSID
CreateStreamOnHGlobal
oleaut32
SysFreeString
SysAllocString
LoadTypeLi
VariantCopy
VariantInit
VariantChangeType
SysAllocStringLen
SysStringByteLen
SysAllocStringByteLen
SysStringLen
VariantClear
OleLoadPicture
winmm
mmioOpenW
mmioClose
mmioRead
mmioSeek
wininet
InternetGetConnectedState
Exports
Exports
Sections
.text Size: 224KB - Virtual size: 222KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 60KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 204KB - Virtual size: 202KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 32KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 164KB - Virtual size: 164KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE