CreatePlugin
Static task
static1
Behavioral task
behavioral1
Sample
0e22c6d9ce277f8c6a82a65ae9b755d94a116c0b7bfdece21a065015feae69fa.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
0e22c6d9ce277f8c6a82a65ae9b755d94a116c0b7bfdece21a065015feae69fa.dll
Resource
win10v2004-20221111-en
General
-
Target
0e22c6d9ce277f8c6a82a65ae9b755d94a116c0b7bfdece21a065015feae69fa
-
Size
308KB
-
MD5
b2d35a7e2050018c1e130304b269b780
-
SHA1
0a270a80655aee59c4a3f7585ebae45a5f41a249
-
SHA256
0e22c6d9ce277f8c6a82a65ae9b755d94a116c0b7bfdece21a065015feae69fa
-
SHA512
b65b53e0882b9a09505e067e9c2ab662962937593d004b7a890bc5384856f928d2561858e8ca70c6b0417f3711b121ba12b720019b7f9b870d7e2827baaeb0db
-
SSDEEP
6144:qY5uQe3tknZo+DKoOsP6OpnaI+z58AV+boAFJizH/ltB04IJPVU:p5uQe9kZIxOtjAB7/ltjIA
Malware Config
Signatures
Files
-
0e22c6d9ce277f8c6a82a65ae9b755d94a116c0b7bfdece21a065015feae69fa.dll windows x86
bc5528aef85d65ae3e4f06801099bf45
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wifiman
_GetAdapterName@12
_GetAdapterMac@28
_GetCurrentNetworkNameW@12
_EnableLog@8
_WriteLog@4
_SetLibraryOption@8
_GetWIFIManagerVersion@0
_GetWIFIServiceStatus@0
_IsDirectWIFI@0
_Ping@8
_CreateTmpProfile@4
_SetDefaultEapConfig@12
_GetProfileNameW@16
_SetWIFIServiceStatus@4
_FreeAllResources@0
_DisconnectFromNetwork@4
_EnumerateProfiles@4
_GetTmpProfileFromAdapter@8
_GetTmpProfileOptionW@16
_FreeTmpProfile@4
_SetTmpProfileOptionW@12
_SetTmpProfileToAdapter@8
_ConnectToNetworkW@8
_EnumerateAdapters@0
_EnumerateAvailableNetworks@8
_GetAvailableNetworkNameW@16
_GetAvailableNetworkSignalQuality@8
_GetAvailableNetworkAuthMode@8
_IsAvailableNetworkSecure@8
_CheckAdapterBusyStatus@8
_GetAdapterNameW@12
_GetAvailableNetworkCipherMode@8
_InstallDriverW@4
iphlpapi
GetIpAddrTable
GetIfTable
wininet
InternetOpenW
InternetConnectW
HttpOpenRequestW
HttpSendRequestW
InternetQueryOptionW
InternetSetOptionW
HttpQueryInfoW
InternetReadFile
InternetCloseHandle
msvcp71
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB
?_Nomemory@std@@YAXXZ
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??$?9_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_W@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IIABV12@@Z
?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
??$?8_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??$?8_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NPB_WABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@@Z
??$?9_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NPB_WABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@@Z
?rfind@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z
?find_last_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?substr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV12@II@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??$?8_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_W@Z
msvcr71
??1exception@@UAE@XZ
??0exception@@QAE@XZ
__CxxFrameHandler
??3@YAXPAX@Z
_purecall
??0exception@@QAE@ABV0@@Z
_CxxThrowException
??_V@YAXPAX@Z
wcscpy
__RTDynamicCast
memmove
_itow
atoi
sprintf
time
wcsrchr
wcslen
swprintf
_vsnwprintf
strchr
strncmp
fclose
fwrite
fopen
strstr
strtol
fread
ftell
fseek
wcscmp
wcsncpy
_wcsicmp
_wtoi
_wcsnicmp
malloc
_callnewh
??1type_info@@UAE@XZ
__security_error_handler
_except_handler3
__dllonexit
_onexit
free
_initterm
_adjust_fdiv
__CppXcptFilter
?terminate@@YAXXZ
memset
_itoa
mfc71u
ord4882
ord748
ord3318
ord2977
ord4237
ord1585
ord1641
ord2089
ord416
ord3789
ord2489
ord5869
ord5742
ord1921
ord6279
ord6061
ord651
ord3678
ord4347
ord3869
ord2876
ord5863
ord3873
ord658
ord3224
ord2952
ord4232
ord1562
ord1632
ord2083
ord2167
ord1299
ord2893
ord1252
ord5829
ord5609
ord1472
ord3983
ord2657
ord587
ord3158
ord4226
ord1536
ord2077
ord1894
ord6063
ord2656
ord2155
ord4729
ord4206
ord4574
ord6232
ord3756
ord5803
ord2366
ord2651
ord4119
ord6086
ord1785
ord1871
ord1772
ord1784
ord354
ord605
ord4256
ord5199
ord1392
ord5908
ord1542
ord1661
ord1662
ord4884
ord5178
ord3435
ord620
ord3189
ord4238
ord1545
ord591
ord3165
ord4228
ord1538
ord2080
ord4092
ord1474
ord1922
ord741
ord572
ord3311
ord4255
ord4480
ord3943
ord2638
ord3703
ord3713
ord3712
ord2985
ord2527
ord2640
ord2534
ord2856
ord2708
ord4301
ord2829
ord2725
ord2531
ord5196
ord1590
ord1646
ord1647
ord1955
ord5171
ord1353
ord4961
ord3339
ord6275
ord3796
ord6273
ord1513
ord2163
ord2169
ord2399
ord2381
ord2379
ord2397
ord2409
ord2386
ord2402
ord2407
ord1079
ord2011
ord1168
ord371
ord1093
ord293
ord577
ord1906
ord774
ord5558
ord776
ord5398
ord2461
ord3842
ord2444
ord2261
ord5485
ord280
ord896
ord899
ord2311
ord283
ord900
ord2121
ord4100
ord1146
ord655
ord1434
ord421
ord3990
ord2460
ord3635
ord2086
ord1582
ord5911
ord1611
ord1608
ord3940
ord1393
ord4234
ord5148
ord1899
ord5067
ord6271
ord4179
ord5210
ord3397
ord4716
ord2390
ord1591
ord5956
ord5231
ord5229
ord920
ord925
ord929
ord927
ord931
ord2384
ord2404
ord2388
ord2394
ord2392
ord4276
kernel32
LeaveCriticalSection
DeleteCriticalSection
Sleep
SetEvent
GetVersionExA
GetTickCount
EnterCriticalSection
InitializeCriticalSection
GetLocalTime
WaitForSingleObject
SetFilePointer
ReleaseMutex
CreateMutexW
GetFileSizeEx
CreateFileW
WriteFile
SetFileAttributesA
CloseHandle
GetModuleFileNameW
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
ExitProcess
CreateMutexA
CreateThread
TerminateThread
GetLastError
DeleteFileA
CreateEventW
LoadLibraryW
GetProcAddress
FreeLibrary
MultiByteToWideChar
WideCharToMultiByte
GetVersionExW
user32
EnableWindow
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
IsWindowVisible
RedrawWindow
SetTimer
GetClientRect
GetSystemMetrics
SystemParametersInfoW
ScreenToClient
WindowFromPoint
GetCursorPos
KillTimer
GetWindowRect
IsWindow
PostMessageW
SendMessageW
advapi32
RegQueryValueExW
RegSetValueExW
RegCreateKeyExW
RegCloseKey
ole32
CoInitialize
CoUninitialize
isaputrace
?Traceout@CiSAPUTrace@@QAEXHABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0H0@Z
?instance@CiSAPUTrace@@SAPAV1@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
Exports
Exports
Sections
.text Size: 164KB - Virtual size: 162KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ