GetModuleInterface
Static task
static1
Behavioral task
behavioral1
Sample
e3dd22f8d35a62d4043639b78a501afbd410e8b5a585037e432476f7b50d20c6.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e3dd22f8d35a62d4043639b78a501afbd410e8b5a585037e432476f7b50d20c6.dll
Resource
win10v2004-20220901-en
General
-
Target
e3dd22f8d35a62d4043639b78a501afbd410e8b5a585037e432476f7b50d20c6
-
Size
488KB
-
MD5
0d14cf5f5725291244159eecd6773ac0
-
SHA1
72296e16d1dcb92cce703e86efe75d7a0aa5b2b8
-
SHA256
e3dd22f8d35a62d4043639b78a501afbd410e8b5a585037e432476f7b50d20c6
-
SHA512
8e2765e0df040ad34e217d6950c7b39d72a2dbf852a8597cddc483a54ea963d59df900b6d517cff84ca1f49857f7a2f2cebcd4c2e7a09012e2dd6091812e88af
-
SSDEEP
12288:XglAO0AeCZhC9eEJ2c7SCCk+SyOw4Et/Kt/+9IXyXpyHh:QlAO0AZ08vRty/8ICXQ
Malware Config
Signatures
Files
-
e3dd22f8d35a62d4043639b78a501afbd410e8b5a585037e432476f7b50d20c6.dll windows x86
12463dd0dfae8ceede7e56b89f2c85bd
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DisableThreadLibraryCalls
lstrcmpiW
SizeofResource
FindResourceExW
GlobalFree
GlobalHandle
GetModuleHandleW
FreeLibrary
MultiByteToWideChar
LoadLibraryExW
SetLastError
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
ExitProcess
HeapSize
HeapReAlloc
HeapDestroy
GetVersionExA
GetCurrentProcess
FlushInstructionCache
HeapAlloc
LeaveCriticalSection
EnterCriticalSection
InterlockedDecrement
InterlockedIncrement
DeleteCriticalSection
InitializeCriticalSection
GetModuleFileNameW
MulDiv
lstrcpyW
lstrcmpW
lstrlenW
RaiseException
GetLastError
FindResourceW
LoadResource
LockResource
GlobalAlloc
GlobalLock
GlobalUnlock
GetProcessHeap
HeapFree
GetCurrentThreadId
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
lstrcpynW
GetVersionExW
user32
LoadIconW
UnregisterClassW
CallWindowProcW
InvalidateRgn
CreateAcceleratorTableW
GetDesktopWindow
CharNextW
GetClassNameW
BeginPaint
FillRect
EndPaint
GetSysColor
DestroyAcceleratorTable
GetWindowTextLengthW
GetWindowTextW
RegisterWindowMessageW
GetClassInfoExW
RegisterClassExW
CreateWindowExW
MapDialogRect
SetWindowContextHelpId
DestroyWindow
IntersectRect
GetFocus
SetCapture
WindowFromPoint
ScreenToClient
ReleaseCapture
GetCursorPos
GetDCEx
DefWindowProcW
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
wsprintfW
SendMessageW
EnableWindow
InvalidateRect
GetCapture
SetCursor
SetRect
SetWindowLongW
GetParent
GetWindow
GetWindowLongW
MapWindowPoints
SetWindowPos
SetParent
MoveWindow
SetWindowTextW
GetDlgItem
SetFocus
GetDC
ReleaseDC
LoadCursorW
PtInRect
IsDialogMessageW
IsChild
KillTimer
SetTimer
ClientToScreen
GetWindowRect
InflateRect
GetMonitorInfoW
EqualRect
CloseDesktop
GetUserObjectInformationW
OpenInputDesktop
MonitorFromWindow
EnumDisplayMonitors
SetActiveWindow
CreateDialogParamW
CreateDialogIndirectParamW
IsWindowVisible
IsWindowEnabled
SetForegroundWindow
ShowWindow
MessageBoxW
DrawTextW
DrawIcon
SetDlgItemTextW
MessageBeep
SetCursorPos
PostMessageW
OffsetRect
TranslateAcceleratorW
DestroyCursor
CopyRect
IsWindow
IsIconic
GetClientRect
GetWindowPlacement
SystemParametersInfoW
GetSystemMetrics
RedrawWindow
gdi32
CreateDCW
CreateCompatibleBitmap
CreateSolidBrush
GetObjectW
SetPixel
GetPixel
SetBkMode
GetTextExtentPoint32W
SetBkColor
SetTextColor
CreateFontIndirectW
GetDeviceCaps
CreateDIBSection
BitBlt
CreateCompatibleDC
SelectObject
DeleteObject
GetStockObject
DeleteDC
comdlg32
ChooseFontW
advapi32
RegQueryInfoKeyW
RegSetValueExW
RegEnumKeyExW
RegOpenKeyExW
RegCreateKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCloseKey
ole32
CoTaskMemRealloc
CreateStreamOnHGlobal
CoTaskMemFree
OleLockRunning
CoTaskMemAlloc
StringFromGUID2
CoCreateInstance
CLSIDFromString
CLSIDFromProgID
CoGetClassObject
OleInitialize
OleUninitialize
oleaut32
SysFreeString
SysStringLen
SysAllocString
VariantInit
VariantClear
SysStringByteLen
OleCreateFontIndirect
LoadRegTypeLi
LoadTypeLi
VarUI4FromStr
SysAllocStringLen
comctl32
_TrackMouseEvent
msvcp71
?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBG@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
?c_str@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEPBGXZ
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
?max@?$numeric_limits@I@std@@SAIXZ
?max@?$numeric_limits@J@std@@SAJXZ
?_Nomemory@std@@YAXXZ
language
??B__val@@QAEHXZ
??1__val@@QAE@XZ
??B__val@@QAE?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@XZ
??A__packet@@QAE?AV__val@@H@Z
??6__packet@@QAEAAV0@V__val@@@Z
??0__val@@QAE@HPAG@Z
??0__packet@@QAE@H@Z
??1__packet@@QAE@XZ
??0__val@@QAE@HUtagRECT@@@Z
??0__val@@QAE@HH@Z
??0__val@@QAE@ABV0@@Z
??0__val@@QAE@HV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@Z
??M__packet@@QAEAAV0@V__val@@@Z
LoadResourceString
??0__val@@QAE@HK@Z
??B__val@@QAE?AV__packet@@XZ
??B__val@@QAE?AUtagSIZE@@XZ
??B__val@@QAEKXZ
??0__packet@@QAE@ABV0@@Z
??0__packet@@QAE@XZ
??0__val@@QAE@HV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?data@__packet@@QAE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
??B__val@@QAEEXZ
??B__val@@QAE?AUtagRECT@@XZ
??B__val@@QAE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
??0__val@@QAE@HE@Z
msvcr71
memcpy
memset
_purecall
free
__CxxFrameHandler
??_V@YAXPAX@Z
??3@YAXPAX@Z
wcscpy
realloc
_CxxThrowException
__CppXcptFilter
_vscwprintf
vswprintf
memmove
??0exception@@QAE@ABV0@@Z
??1exception@@UAE@XZ
??0exception@@QAE@XZ
wcslen
memcmp
_except_handler3
_adjust_fdiv
_initterm
_onexit
abs
sprintf
wcsrchr
time
_wcslwr
wcscmp
malloc
_callnewh
__security_error_handler
?terminate@@YAXXZ
??1type_info@@UAE@XZ
__dllonexit
_wcsicmp
controls
?AddColor@CComboBoxColor@@QAEHPBGK@Z
??0CComboBoxColor@@QAE@XZ
??1CComboBoxColor@@UAE@XZ
?SetPicture@CPictureHDCTS@@QAEXPAUHDC__@@HH@Z
?IsShow@CToolTipTS@@QBE_NXZ
?ShowToolTip@CToolTipTS@@QAEXHHK@Z
??1CMenuTS@@QAE@XZ
??0CMenuTS@@QAE@AAV__packet@@_N@Z
?EnableMenuItem@CMenuTS@@QAEHII@Z
?FindMenuItem@CMenuTS@@QAEHV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@Z
?RemoveMenu@CMenuTS@@QAEHII@Z
?SubclassWindow@?$CWindowImplBaseT@V?$CComboBoxT@VCWindow@ATL@@@WTL@@V?$CWinTraits@$0FGAAAAAA@$0A@@ATL@@@ATL@@QAEHPAUHWND__@@@Z
?GetSubMenu@CMenuTS@@QAEPAV1@H@Z
?ChangeText@CMenuTS@@QAEHIIABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@Z
?TrackPopupMenu@CMenuTS@@QAEHIHHPAUHWND__@@PBUtagRECT@@@Z
??1CToolTipTS@@UAE@XZ
?SetText@CToolTipTS@@QAEXPBG@Z
?UpdateTipText@?$CToolTipCtrlT@VCWindow@ATL@@@WTL@@QAEXV_U_STRINGorID@ATL@@PAUHWND__@@I@Z
??0CToolTipTS@@QAE@PAV__packet@@@Z
?InitToolTip@CToolTipTS@@QAEXPAUHWND__@@_N@Z
?ProcessWindowMessage@CToolTipTS@@UAEHPAUHWND__@@IIJAAJK@Z
?GetWindowProc@?$CWindowImplBaseT@V?$CToolTipCtrlT@VCWindow@ATL@@@WTL@@V?$CWinTraits@$0FGAAAAAA@$0A@@ATL@@@ATL@@UAEP6GJPAUHWND__@@IIJ@ZXZ
?OnFinalMessage@?$CWindowImplBaseT@V?$CToolTipCtrlT@VCWindow@ATL@@@WTL@@V?$CWinTraits@$0FGAAAAAA@$0A@@ATL@@@ATL@@UAEXPAUHWND__@@@Z
??0?$CComboBoxT@VCWindow@ATL@@@WTL@@QAE@PAUHWND__@@@Z
?GetCurSel@?$CComboBoxT@VCWindow@ATL@@@WTL@@QBEHXZ
?CheckItem@CMenuTS@@QAEHII@Z
?DoDefParentDraw@CTextTS@@UAEXPAUHDC__@@JJ@Z
?ProcessWindowMessage@CMenuTS@@QAEHPAUHWND__@@IIJAAJK@Z
?HideToolTip@CToolTipTS@@QAEXXZ
?DestroyWindow@?$CWindowImplBaseT@V?$CToolTipCtrlT@VCWindow@ATL@@@WTL@@V?$CWinTraits@$0FGAAAAAA@$0A@@ATL@@@ATL@@QAEHXZ
?GetHWND@?$CControlWindowBase@VCBarDlgTS@@@@UAEPAUHWND__@@XZ
?IsVisible@?$CControlWindowBase@VCBarDlgTS@@@@UAEHXZ
?SetVisible@?$CControlWindowBase@VCBarDlgTS@@@@UAEXH@Z
?SetData@CBarDlgTS@@UAEXPAV__packet@@@Z
?DoDefParentDraw@?$CControlWindowBase@VCBarDlgTS@@@@UAEXPAUHDC__@@JJ@Z
?Resize@?$CControlWindowBase@VCBarDlgTS@@@@UAEXABUtagRECT@@@Z
?BasicRedraw@CBaseDlgTS@@MAEXAAUtagRECT@@@Z
?InitNormalState@CBaseDlgTS@@MAEXXZ
?InitTransientState@CBaseDlgTS@@MAEXXZ
?InitInitialState@CBaseDlgTS@@MAEXXZ
?ReinitState@CBaseDlgTS@@MAEXW4dlgstates@@H@Z
?InitCustomDrawI@CBaseDlgTS@@MAEXXZ
?PostInitDlg@CBarDlgTS@@UAEXXZ
?InitDlg@CBaseDlgTS@@MAEXXZ
?PreInitDlg@CBaseDlgTS@@MAEXXZ
?ChangeTitle@CBaseDlgTS@@MAEXXZ
?CreateActiveXControls@?$CAxDialogImpl@VCBaseDlgTS@@VCWindowTS@@@ATL@@UAEJI@Z
?OnFinalMessage@CBarDlgTS@@UAEXPAUHWND__@@@Z
?GetDialogProc@?$CAxDialogImpl@VCBaseDlgTS@@VCWindowTS@@@ATL@@UAEP6GHPAUHWND__@@IIJ@ZXZ
?ProcessWindowMessage@CBarDlgTS@@UAEHPAUHWND__@@IIJAAJK@Z
?GetHWND@?$CControlWindowBase@VCAnimateTS@@@@UAEPAUHWND__@@XZ
?IsVisible@?$CControlWindowBase@VCAnimateTS@@@@UAEHXZ
?SetVisible@CAnimateTS@@UAEXH@Z
?SetData@CAnimateTS@@UAEXPAV__packet@@@Z
?DoDefParentDraw@?$CControlWindowBase@VCAnimateTS@@@@UAEXPAUHDC__@@JJ@Z
?Resize@?$CControlWindowBase@VCAnimateTS@@@@UAEXABUtagRECT@@@Z
?OnFinalMessage@?$CWindowImplBaseT@V?$CAnimateCtrlT@VCWindow@ATL@@@WTL@@V?$CWinTraits@$0FGAAAAAA@$0A@@ATL@@@ATL@@UAEXPAUHWND__@@@Z
?GetWindowProc@?$CWindowImplBaseT@V?$CAnimateCtrlT@VCWindow@ATL@@@WTL@@V?$CWinTraits@$0FGAAAAAA@$0A@@ATL@@@ATL@@UAEP6GJPAUHWND__@@IIJ@ZXZ
?ProcessWindowMessage@CAnimateTS@@UAEHPAUHWND__@@IIJAAJK@Z
?GetHWND@?$CControlWindowBase@VCButtonTS@@@@UAEPAUHWND__@@XZ
?IsVisible@?$CControlWindowBase@VCButtonTS@@@@UAEHXZ
?SetVisible@CButtonTS@@UAEXH@Z
?SetData@CButtonTS@@UAEXPAV__packet@@@Z
?DoDefParentDraw@CButtonTS@@UAEXPAUHDC__@@JJ@Z
?Resize@CButtonTS@@UAEXABUtagRECT@@@Z
?OnFinalMessage@?$CWindowImplBaseT@V?$CButtonT@VCWindow@ATL@@@WTL@@V?$CWinTraits@$0FGAAAAAA@$0A@@ATL@@@ATL@@UAEXPAUHWND__@@@Z
?GetWindowProc@CButtonTS@@UAEP6GJPAUHWND__@@IIJ@ZXZ
?ProcessWindowMessage@CButtonTS@@UAEHPAUHWND__@@IIJAAJK@Z
?SetData@CTextTS@@UAEXPAV__packet@@@Z
?RedrawBar@CBarDlgTS@@QAEXXZ
?Resize@CTextTS@@UAEXABUtagRECT@@@Z
?SetData@CPictureHDCTS@@UAEXPAV__packet@@@Z
?DoDefParentDraw@CPictureHDCTS@@UAEXPAUHDC__@@JJ@Z
?GetHWND@CControlBase@@UAEPAUHWND__@@XZ
?IsVisible@CControlBase@@UAEHXZ
?SetVisible@CControlBase@@UAEXH@Z
?GetCtrlID@CControlBase@@UBEKXZ
?SetData@CPictureTS@@UAEXPAV__packet@@@Z
?GetCurrentRect@CControlBase@@UBE?AUtagRECT@@XZ
?GetPlacementRect@CControlBase@@UBE?AUtagRECT@@XZ
?SetPlacementRect@CControlBase@@UAEXABUtagRECT@@@Z
?GetPlacementOpt@CControlBase@@UBEKXZ
?SetPlacementOpt@CControlBase@@UAEXK@Z
?DoDefParentDraw@CPictureTS@@UAEXPAUHDC__@@JJ@Z
?Resize@CControlBase@@UAEXABUtagRECT@@@Z
?SetCheck@CButtonTS@@QAEX_N@Z
?GetCtrl@CBaseDlgTS@@QAEPAVCControlBase@@K@Z
?Create@?$CAxDialogImpl@VCBaseDlgTS@@VCWindowTS@@@ATL@@QAEPAUHWND__@@PAU3@J@Z
??0CBarDlgTS@@QAE@PAVCMessageLoop@WTL@@PAV__packet@@@Z
?Create@?$CWindowImpl@VCAnimateTS@@V?$CAnimateCtrlT@VCWindow@ATL@@@WTL@@V?$CWinTraits@$0FGAAAAAA@$0A@@ATL@@@ATL@@QAEPAUHWND__@@PAU3@V_U_RECT@2@PBGKKV_U_MENUorID@2@PAX@Z
??0CAnimateTS@@QAE@PAV__packet@@@Z
?Create@CButtonTS@@QAEPAUHWND__@@PAU2@V_U_RECT@ATL@@PBGKKV_U_MENUorID@4@PAX@Z
??0CButtonTS@@QAE@PAV__packet@@@Z
??0CTextTS@@QAE@PAV__packet@@@Z
??0CPictureHDCTS@@QAE@PAV__packet@@@Z
??0CPictureTS@@QAE@PAV__packet@@@Z
??1CPictureTS@@UAE@XZ
??1CPictureHDCTS@@UAE@XZ
??1CTextTS@@UAE@XZ
??1CButtonTS@@UAE@XZ
??1CAnimateTS@@UAE@XZ
??1CBarDlgTS@@UAE@XZ
?SetCurSel@?$CComboBoxT@VCWindow@ATL@@@WTL@@QAEHH@Z
cfresource
?GetImageInterface@@YAPAVICamfrogPicture@@KW4ebstates@@K@Z
Exports
Exports
Sections
.text Size: 324KB - Virtual size: 322KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 64KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ