getLibDesc
Static task
static1
Behavioral task
behavioral1
Sample
311e89241ac6ef5e8220e312a8a00750445ca1186bae62388b3a258f6914f42c.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
311e89241ac6ef5e8220e312a8a00750445ca1186bae62388b3a258f6914f42c.dll
Resource
win10v2004-20220901-en
General
-
Target
311e89241ac6ef5e8220e312a8a00750445ca1186bae62388b3a258f6914f42c
-
Size
176KB
-
MD5
9309987a065a5e0a96ff960172135d40
-
SHA1
ecbbbb158a67f69ec80c639f93b9addf9e51b21f
-
SHA256
311e89241ac6ef5e8220e312a8a00750445ca1186bae62388b3a258f6914f42c
-
SHA512
cedab50b83d7d1015cc855210292b03e188af38beb73f68ca895391de643ebb0599378872d4c63dd776013c39f8b2402f903961b9adff4ed2cf0288d1e849a1f
-
SSDEEP
3072:/BdsXgsiYyGOgcMzZ9/0OgAa/pMgux0A6aaKt+PEF1JYm5QsoxJunEO14y:Z/siNGOgcMzUOfaE6bTjm2sGk
Malware Config
Signatures
Files
-
311e89241ac6ef5e8220e312a8a00750445ca1186bae62388b3a258f6914f42c.dll windows x86
834a00d23cdddc2ec00b314eb0534331
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcessId
GetCurrentProcess
GetCurrentThreadId
InterlockedExchange
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedCompareExchange
Sleep
OutputDebugStringA
vray
?frameBegin@VRayPluginInterface@VUtils@@UAEXPAVVRayRenderer@2@@Z
??0VRayParameterListDesc@VUtils@@QAE@XZ
?addParamFloat@VRayParameterListDesc@VUtils@@QAEHPADMHPBD1@Z
??1VRayParameterListDesc@VUtils@@QAE@XZ
?cacheParams@VRayParameterList@VUtils@@QAEXNABUTracePoint@2@@Z
?deleteParameterList@VRayParameterListDesc@VUtils@@QAEXPAUVRayParameterList@2@@Z
?newParameterList@VRayParameterListDesc@VUtils@@QAEPAUVRayParameterList@2@XZ
?setParamCache@VRayParameterList@VUtils@@QAEXPADPAH@Z
?setParamCache@VRayParameterList@VUtils@@QAEXPADPAM@Z
?registerParameters@VRayParameterListDesc@VUtils@@QAEHPAVVRayPluginHost@2@PAVVRayPluginDesc@2@@Z
?setParameter@VRayParameterList@VUtils@@QAEHPAVVRayPluginParameter@2@@Z
?getParam@VRayParameterList@VUtils@@QAEPAVVRayPluginParameter@2@PBD@Z
?addParamBool@VRayParameterListDesc@VUtils@@QAEHPAD_NHPBD2@Z
libmmd
__libm_sse2_sincos
msvcr80
memset
free
__CxxFrameHandler
_heapchk
_heapwalk
malloc
_CxxThrowException
memcpy
_purecall
_vsnprintf
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_except_handler4_common
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
_crt_debugger_hook
Exports
Exports
Sections
.text Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text1 Size: 4KB - Virtual size: 864B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 428B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE