CreateInterface
Static task
static1
Behavioral task
behavioral1
Sample
e0b4d7a447bef4e0e78b6e93e2f3436101ec07f3b813797cb344851b5ac721b4.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e0b4d7a447bef4e0e78b6e93e2f3436101ec07f3b813797cb344851b5ac721b4.dll
Resource
win10v2004-20220812-en
General
-
Target
e0b4d7a447bef4e0e78b6e93e2f3436101ec07f3b813797cb344851b5ac721b4
-
Size
512KB
-
MD5
0ff6f40980aafdcbb7ddbf31d1599e5a
-
SHA1
445244852705735e44030ab59120b353c5b1001a
-
SHA256
e0b4d7a447bef4e0e78b6e93e2f3436101ec07f3b813797cb344851b5ac721b4
-
SHA512
9c0dac3414d0042de8751856fbd7775a30c952e6438285bbf77e8009d04c873af6081038cc8283bcaf5938f1e59ee6617ee93a853c5b905a064336b4914d22fb
-
SSDEEP
6144:ush7614JQfIK1BO9mlGOTG4Gv/snhzLw1I/u1tHxgIh5nQCrOOOkot:ush76lf9kmlGOTRyI5U1Im3pHQCaOOft
Malware Config
Signatures
Files
-
e0b4d7a447bef4e0e78b6e93e2f3436101ec07f3b813797cb344851b5ac721b4.dll windows x86
a425c36722509488e711bce15d99359b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InitializeCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetCurrentDirectoryA
OutputDebugStringA
MultiByteToWideChar
TerminateProcess
GetCurrentProcess
GetModuleFileNameA
GetModuleHandleA
IsDebuggerPresent
GetEnvironmentVariableA
VirtualQuery
HeapAlloc
GetProcessHeap
GetLocaleInfoW
SetEndOfFile
SetConsoleCtrlHandler
IsBadCodePtr
IsBadWritePtr
IsBadReadPtr
SetUnhandledExceptionFilter
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
GetStringTypeW
GetStringTypeA
GetSystemInfo
VirtualAlloc
VirtualProtect
FlushFileBuffers
SetStdHandle
GetTimeZoneInformation
SetEnvironmentVariableA
GetOEMCP
GetACP
CompareStringW
GetCPInfo
CompareStringA
CreateFileA
InterlockedExchange
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
WriteFile
UnhandledExceptionFilter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
LCMapStringW
LCMapStringA
SetFilePointer
ReadFile
TlsGetValue
TlsSetValue
TlsFree
GetCurrentThread
SetLastError
TlsAlloc
SetCurrentDirectoryA
CloseHandle
FatalAppExitA
EnterCriticalSection
RtlUnwind
GetFullPathNameA
WideCharToMultiByte
GetProcAddress
LoadLibraryA
FreeLibrary
WaitForMultipleObjects
GetLastError
CreateDirectoryA
MoveFileA
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileA
SetFileAttributesA
GetFileAttributesA
ExitProcess
GetCurrentThreadId
GetCommandLineA
GetVersionExA
DeleteFileA
user32
DestroyWindow
GetForegroundWindow
MessageBoxA
shell32
SHGetFileInfoW
steam
_f
SteamFindFirst
SteamFindClose
tier0
??0CThread@@QAE@XZ
?Start@CThread@@UAE_NI@Z
?Init@CThread@@MAE_NXZ
?OnExit@CThread@@MAEXXZ
?WaitForCreateComplete@CThread@@MAE_NPAVCThreadEvent@@@Z
?GetThreadProc@CThread@@MAEP6GIPAX@ZXZ
?GetPriority@CThread@@QBEHXZ
ThreadGetPriority
?SetPriority@CThread@@QAE_NH@Z
??0CThreadMutex@@QAE@XZ
Warning
Plat_FloatTime
Error
_SpewInfo
_SpewMessage
ShouldUseNewAssertDialog
DoNewAssertDialog
_ExitOnFatalAssert
?Sleep@CThread@@SAXI@Z
??1CThread@@UAE@XZ
?DevMsg@@YAXPBDZZ
ThreadInterlockedExchange
?Set@CThreadLocalBase@@QAEXPAX@Z
?Get@CThreadLocalBase@@QBEPAXXZ
??0CThreadLocalBase@@QAE@XZ
ThreadInterlockedExchangeAdd
ThreadInMainThread
??1CThreadLocalBase@@QAE@XZ
?Lock@CThreadFastMutex@@QCEXI@Z
CommandLine_Tier0
?ExitScope@CVProfile@@QAEXXZ
g_VProfCurrentProfile
?EnterScope@CVProfile@@QAEXPBDH0_NH@Z
ThreadInterlockedDecrement
ThreadInterlockedIncrement
?Lock@CThreadMutex@@QBEXXZ
?Lock@CThreadMutex@@QAEXXZ
g_pMemAlloc
g_ClockSpeedMillisecondsMultiplier
?Join@CThread@@QAE_NI@Z
?CallWorker@CWorkerThread@@QAEHII_N@Z
ThreadSleep
g_pVCR
?GetCurrentCThread@CThread@@SAPAV1@XZ
?Reply@CWorkerThread@@QAEXI@Z
?GetCallParam@CWorkerThread@@QBEIXZ
?GetCallHandle@CWorkerThread@@QAEPAXXZ
Msg
AssertValidStringPtr
_AssertValidWritePtr
_AssertValidReadPtr
DevMsg
?TryLock@CThreadMutex@@QAE_NXZ
?Wait@CThreadSyncObject@@QAE_NI@Z
?Release@CThreadSemaphore@@QAE_NJPAJ@Z
?Resume@CThread@@QAEIXZ
?Suspend@CThread@@QAEIXZ
?BoostPriority@CWorkerThread@@QAEHXZ
??1CThreadEvent@@QAE@XZ
??1CThreadMutex@@QAE@XZ
??1CWorkerThread@@UAE@XZ
??0CThreadSemaphore@@QAE@JJ@Z
??0CThreadEvent@@QAE@_N@Z
??0CWorkerThread@@QAE@XZ
??1CThreadSyncObject@@QAE@XZ
?Set@CThreadEvent@@QAE_NXZ
?Reset@CThreadEvent@@QAE_NXZ
vstdlib
KeyValuesSystem
GetCVarIF
RandomInt
Exports
Exports
Sections
.text Size: 260KB - Virtual size: 257KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 196KB - Virtual size: 196KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE