XiEndPrrocc
Static task
static1
Behavioral task
behavioral1
Sample
b226a4fbb105ed6ade984cf4ea7c7fe19ee6cfedccd564655496f626b426b523.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b226a4fbb105ed6ade984cf4ea7c7fe19ee6cfedccd564655496f626b426b523.dll
Resource
win10v2004-20220812-en
General
-
Target
b226a4fbb105ed6ade984cf4ea7c7fe19ee6cfedccd564655496f626b426b523
-
Size
89KB
-
MD5
c6c2ad60b5d9c0ed38ded75c1147035f
-
SHA1
aeba21eea6835d3931c2f95be805e53a0b141c4f
-
SHA256
b226a4fbb105ed6ade984cf4ea7c7fe19ee6cfedccd564655496f626b426b523
-
SHA512
4847161c209dfa340b2c366f5ea565386a77e347a9603d6f3cb249d8fa3cc3549c6a77371321c0ff770d3a20121bc9a974728c7c686ad88ba39b1bddebbbd4c0
-
SSDEEP
1536:QCtCSxBLfbqpqEEiznucQ5h740OsCmerheIh+1Yd/xuX7sBFV:rFxBzOpqEEYuHz5OkerheyQYeoBH
Malware Config
Signatures
Files
-
b226a4fbb105ed6ade984cf4ea7c7fe19ee6cfedccd564655496f626b426b523.dll windows x86
cdaeee78cadf9e41d0872ade261d5c1f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetThreadPriority
GetCurrentThread
ResumeThread
GetPrivateProfileStringA
GetPrivateProfileIntA
CreateProcessA
GetModuleHandleA
FreeLibrary
LocalFree
GetCurrencyFormatA
GetModuleFileNameA
RemoveDirectoryA
GetFileSize
GetTempFileNameA
GetTempPathA
CreateDirectoryA
GetFileAttributesA
MultiByteToWideChar
GetStartupInfoA
MapViewOfFile
CreateFileMappingA
CloseHandle
SetFileTime
DosDateTimeToFileTime
GetLastError
CreateFileA
SetLastError
UnmapViewOfFile
lstrlenA
GetProcAddress
DeleteFileA
LoadLibraryA
ole32
CoCreateInstance
CoUninitialize
CoInitialize
user32
TranslateMessage
DispatchMessageA
SetCursor
LoadCursorA
UpdateWindow
ShowWindow
CreateWindowExA
RegisterClassA
GetKeyboardType
GetDlgItem
GetWindowRect
MoveWindow
GetDC
ReleaseDC
SendDlgItemMessageA
GetParent
wsprintfA
SetDlgItemTextA
PostMessageA
MessageBoxA
GetFocus
SendMessageA
EndPaint
GetSystemMetrics
BeginPaint
DefWindowProcA
PeekMessageA
advapi32
RegEnumKeyExA
RegQueryValueA
RegSetValueExA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
msvcrt
remove
free
strrchr
strcmp
strcpy
strlen
strcat
strncat
memset
memcpy
strchr
qsort
realloc
fgets
strncmp
exit
fread
ftell
fseek
fopen
fclose
fwrite
sprintf
sscanf
comctl32
PropertySheetA
CreatePropertySheetPageA
gdi32
DeleteObject
SetTextColor
TextOutA
SetBkMode
SelectObject
CreateFontA
CreateDIBitmap
CreateSolidBrush
Exports
Exports
Sections
.text Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ