createDevice
Static task
static1
Behavioral task
behavioral1
Sample
Irrlicht.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Irrlicht.dll
Resource
win10v2004-20220812-en
General
-
Target
Irrlicht.dll
-
Size
17KB
-
MD5
a1bb52c64177a6b34358954f87a9f465
-
SHA1
2bf3f7e244cc7676727e4abd9c6aff1aaf47b598
-
SHA256
f4558ba9ca2e29d662b88e1899b3b4cc78fef7b89e653a2bc36c9b2399cbd272
-
SHA512
8756049d0bcd06997334279b77757818f424888eec1cda625d43a1601687bdf2ae0e8b1bae53dcc9aee49a585d7b3832f42b8e1d4d9a329280822ec27dd73231
-
SSDEEP
384:tLAIKHm7bfSFFBDAqkcSPdWjQCwOtRsR+CgfJvjMi35nm8QFs8hriNc:+IKHm7bfQPQCbRjCgfGi348QFsWW
Malware Config
Signatures
Files
-
Irrlicht.dll.dll windows x86
693059389e099156dc0c9be4c1b6eb22
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
GetModuleFileNameA
CreateFileA
CloseHandle
GetFileSize
HeapAlloc
GetProcessHeap
ReadFile
GetLastError
HeapFree
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
UnhandledExceptionFilter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
vcruntime140
_except_handler4_common
memset
memcpy
__std_type_info_destroy_list
strrchr
__CxxFrameHandler3
_CxxThrowException
api-ms-win-crt-runtime-l1-1-0
exit
_cexit
_execute_onexit_table
_initialize_onexit_table
_initialize_narrow_environment
_seh_filter_dll
_initterm_e
_initterm
_configure_narrow_argv
api-ms-win-crt-string-l1-1-0
strcat_s
api-ms-win-crt-heap-l1-1-0
free
Exports
Exports
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 884B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ