CreateInterface
Static task
static1
Behavioral task
behavioral1
Sample
455f0087e8dcf90aa75fd2ccf8d2993178d93e0123ba379dcb44d4c99fb2a9dd.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
455f0087e8dcf90aa75fd2ccf8d2993178d93e0123ba379dcb44d4c99fb2a9dd.dll
Resource
win10v2004-20220901-en
General
-
Target
455f0087e8dcf90aa75fd2ccf8d2993178d93e0123ba379dcb44d4c99fb2a9dd
-
Size
1.0MB
-
MD5
1e967a1919774cee15b9eff406022360
-
SHA1
b8db9e1d613cb1c522c505ab8e8d84e0b5e83384
-
SHA256
455f0087e8dcf90aa75fd2ccf8d2993178d93e0123ba379dcb44d4c99fb2a9dd
-
SHA512
fa3d774c712764fb9472a10e3894023fb08824cd9df56a04b4c8401fb19beeac30cf71fd96356023f4b0c0c51a515d660e65fd576e3bc909f2854c271edb25c6
-
SSDEEP
12288:QB+e3zS1M4XPtY5IUXToS7jWpzUcJFy17Lx0oimNLvb+HE8SHs3dv/T58kr5XP3l:QB++S1vE7jWpzvy17LLTMy8N8uV
Malware Config
Signatures
Files
-
455f0087e8dcf90aa75fd2ccf8d2993178d93e0123ba379dcb44d4c99fb2a9dd.dll windows x86
bc46cd4481d14b29e9b080ff91d2f879
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
GlobalMemoryStatus
GetCurrentThreadId
InterlockedExchange
MultiByteToWideChar
WideCharToMultiByte
RaiseException
GetLastError
lstrlenA
InterlockedDecrement
OutputDebugStringA
GetModuleFileNameA
GetStdHandle
WriteFile
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlUnwind
ExitProcess
LeaveCriticalSection
EnterCriticalSection
GetProcessHeap
HeapAlloc
GetVersionExA
HeapFree
GetCommandLineA
VirtualQuery
IsProcessorFeaturePresent
CreateThread
GetThreadLocale
ResumeThread
WaitForMultipleObjects
GetExitCodeThread
GetSystemInfo
CreateFileA
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetStringTypeW
GetStringTypeA
SetFilePointer
GetLocaleInfoA
ReadFile
InitializeCriticalSection
LoadLibraryA
FlushFileBuffers
GetConsoleMode
GetConsoleCP
LCMapStringW
LCMapStringA
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
DeleteCriticalSection
GetStartupInfoA
GetFileType
SetHandleCount
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
IsDebuggerPresent
GetCurrentProcess
TerminateProcess
CloseHandle
GetCurrentProcessId
GetModuleHandleA
GetProcAddress
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
TlsGetValue
user32
GetClientRect
GetParent
SendMessageA
GetWindowLongA
EnumChildWindows
DefWindowProcA
SetWindowLongA
CreateWindowExA
RegisterClassA
UnregisterClassA
DestroyWindow
EnumWindows
IsIconic
GetMonitorInfoA
ole32
CoCreateInstance
CoUninitialize
CoInitializeSecurity
CoInitialize
CoSetProxyBlanket
oleaut32
SysAllocString
SysFreeString
VariantClear
VariantInit
vstdlib
KeyValuesSystem
tier0
_AssertValidReadPtr
_AssertValidWritePtr
AssertValidStringPtr
LoggingSystem_LogAssert
CallAssertFailedNotifyFunc
ShouldUseNewAssertDialog
DoNewAssertDialog
_ExitOnFatalAssert
LoggingSystem_RegisterLoggingChannel
?DevWarning@@YAXPBDZZ
?UnlockRead@CThreadSpinRWLock@@QAEXXZ
GetCPUInformation
LoggingSystem_IsChannelEnabled
LoggingSystem_Log
?Lock@CThreadFastMutex@@ACEXII@Z
?DevMsg@@YAXPBDZZ
ThreadInMainThread
Plat_FloatTime
Plat_DebugString
Plat_GetPagedPoolInfo
Error
?ExitScope@CVProfile@@QAEXXZ
?EnterScope@CVProfile@@QAEXPBDH0_NH@Z
g_VProfCurrentProfile
?FindOrCreateCounter@CVProfile@@QAEPAHPBDW4CounterGroup_t@@@Z
Msg
g_pMemAlloc
CommandLine
Warning
?LockForRead@CThreadSpinRWLock@@QAEXXZ
?UnlockWrite@CThreadSpinRWLock@@QAEXXZ
?LockForWrite@CThreadSpinRWLock@@QAEXXZ
??0CThreadSpinRWLock@@QAE@XZ
DevMsg
d3d10
D3D10CreateDeviceAndSwapChain
D3D10ReflectShader
d3d9
Direct3DCreate9
D3DPERF_SetOptions
d3dx10_33
D3DX10CompileFromMemory
D3DXPlaneTransform
D3DXMatrixPerspectiveOffCenterRH
D3DXVec4Transform
D3DXMatrixPerspectiveRH
D3DXMatrixOrthoOffCenterRH
D3DXPlaneNormalize
D3DXMatrixInverse
D3DXMatrixMultiply
D3DXVec3TransformCoord
D3DXCreateMatrixStack
D3DXMatrixTranspose
D3DXMatrixTranslation
D3DXVec4Normalize
d3dx9_33
D3DXCompileShader
D3DXGetShaderVersion
dxgi
CreateDXGIFactory
Exports
Exports
Sections
.text Size: 488KB - Virtual size: 484KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 396KB - Virtual size: 395KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 243KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 44KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE