CreateVideoDecoder
Static task
static1
Behavioral task
behavioral1
Sample
b34bbfc378ca54bc6ff00ce130e42850c37b44d26204b14c9898585064e521f5.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b34bbfc378ca54bc6ff00ce130e42850c37b44d26204b14c9898585064e521f5.dll
Resource
win10v2004-20220812-en
General
-
Target
b34bbfc378ca54bc6ff00ce130e42850c37b44d26204b14c9898585064e521f5
-
Size
283KB
-
MD5
71f272468a64123a07627e87cc92534d
-
SHA1
ed798010c3c84a6787dab82ddecaa7a0a18705d6
-
SHA256
b34bbfc378ca54bc6ff00ce130e42850c37b44d26204b14c9898585064e521f5
-
SHA512
5f0d0a822d575eb80f53548be809c4640419daec361f89401db9dd80bc2e6e865029d2666efbbe153ac5ecad6121d46a7a59d02d186a78380ed04d98b81bb8b7
-
SSDEEP
6144:WS+8BydKGXOGJnTCBJb9BJbtBJbIBJbEAtxUtx8IxQI8a8nPt9YMkr2KLN0Jk:WZp1TCBJb9BJbtBJbIBJbjA8dYum0a
Malware Config
Signatures
Files
-
b34bbfc378ca54bc6ff00ce130e42850c37b44d26204b14c9898585064e521f5.dll windows x86
f69878a17bc495c53ea3c7cb05cfd6d5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GlobalFree
GlobalAlloc
Sleep
LoadLibraryA
VirtualAlloc
user32
MessageBoxA
gdi32
GetPixel
CreateCompatibleDC
CreateBitmap
SelectObject
CreateFontA
SetTextColor
SetBkColor
SetBkMode
DeleteDC
DeleteObject
ExtTextOutA
BitBlt
nscrt
_purecall
??3@YAXPAX@Z
??2@YAPAXI@Z
malloc
calloc
free
_ftol
fclose
fwrite
fopen
sprintf
fprintf
_vsnprintf
rand
_initterm
_adjust_fdiv
__CppXcptFilter
__dllonexit
_onexit
_except_handler3
strncmp
winmm
timeGetTime
Exports
Exports
Sections
.text Size: 143KB - Virtual size: 142KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 22KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
WILK_DX_ Size: 512B - Virtual size: 160B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 107KB - Virtual size: 107KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ