EnumRelCamSettingDataNext
Static task
static1
Behavioral task
behavioral1
Sample
40a1153e91827dd8add185b267fce8a9f0444ff978728b4583a7ba2220d0b6d1.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
40a1153e91827dd8add185b267fce8a9f0444ff978728b4583a7ba2220d0b6d1.dll
Resource
win10v2004-20220901-en
General
-
Target
40a1153e91827dd8add185b267fce8a9f0444ff978728b4583a7ba2220d0b6d1
-
Size
216KB
-
MD5
9b0ce8c9aa0ae9e296d6e8fa5b397868
-
SHA1
214b66d439586687f163d837c6de07702313b33a
-
SHA256
40a1153e91827dd8add185b267fce8a9f0444ff978728b4583a7ba2220d0b6d1
-
SHA512
8023d2bb7b543f71b4c1f4aca734f0bf07a0747ab7b13ba4fb32573e6df00ddb2381a94995808c6279fdf47ac96e76cda41d61482aafdd6a6d500e25324ab9c7
-
SSDEEP
6144:euBfBSoXMPOJPef8FIdpOsY4AMuNlDhY:VBN8P24qIqsYDNY
Malware Config
Signatures
Files
-
40a1153e91827dd8add185b267fce8a9f0444ff978728b4583a7ba2220d0b6d1.dll windows x86
0b051ce70af518ffb09fdfd7e7e39e35
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
ExitProcess
ExitThread
FindClose
FormatMessageA
FreeEnvironmentStringsW
GetCommandLineA
GetConsoleCP
GetLastError
GetLocaleInfoA
GetModuleHandleA
GetNumberFormatA
GetStartupInfoA
GetStringTypeW
GetVersionExA
HeapAlloc
HeapCreate
HeapReAlloc
HeapSize
InterlockedIncrement
IsBadReadPtr
IsValidCodePage
LCMapStringW
LoadLibraryA
MultiByteToWideChar
OpenEventA
ResetEvent
RtlUnwind
SetLastError
SetUnhandledExceptionFilter
Sleep
TlsFree
VirtualAlloc
WriteFile
lstrcmpiA
lstrcpynA
user32
UpdateWindow
SetWindowTextA
SetUserObjectSecurity
SetMenuItemInfoA
ReleaseCapture
ModifyMenuA
MessageBoxA
InflateRect
GetWindowPlacement
GetParent
FillRect
EndPaint
DestroyIcon
DeferWindowPos
CreatePopupMenu
CheckMenuItem
advapi32
LsaLookupPrivilegeName
GetKernelObjectSecurity
ElfOpenEventLogW
DeleteService
ObjectPrivilegeAuditAlarmW
RegDeleteValueW
SetFileSecurityA
SetSecurityDescriptorOwner
ddraw
DDInternalUnlock
DDInternalLock
DirectDrawEnumerateExA
DirectDrawCreateClipper
ole32
CoBuildVersion
CoCreateGuid
CoCreateInstance
CoGetMalloc
CoTaskMemAlloc
CLSIDFromString
Exports
Exports
Sections
.text Size: 140KB - Virtual size: 139KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 64KB - Virtual size: 139KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ