_AvisynthPluginInit2@4
Static task
static1
Behavioral task
behavioral1
Sample
909725ee3cb54245800febe955aada983a326be914f2bc1ff8b9693f634d5d98.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
909725ee3cb54245800febe955aada983a326be914f2bc1ff8b9693f634d5d98.dll
Resource
win10v2004-20220812-en
General
-
Target
909725ee3cb54245800febe955aada983a326be914f2bc1ff8b9693f634d5d98
-
Size
92KB
-
MD5
10ff97c22ab78c100e9b1c49f96e59b6
-
SHA1
ba9c6c4b7a63405f5925e53be9a48a4d06facdd5
-
SHA256
909725ee3cb54245800febe955aada983a326be914f2bc1ff8b9693f634d5d98
-
SHA512
37fabf508c3af99ef36a74150053cff8815b614e2ec0d894f6c5a53f464569bf5b04b677db4c404205241e787221f938c7acfa6fa09a13ed1b7ccfe3cf986f63
-
SSDEEP
1536:RsUI4gJrWuzYIQEuBBS4fNHTRYFRoRTUqetS9HuyxnHw:RsUI4EreIQEO84lqRZqetS9Rd
Malware Config
Signatures
Files
-
909725ee3cb54245800febe955aada983a326be914f2bc1ff8b9693f634d5d98.dll windows x86
67134e545652ed6bb28c7690063dcc3e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateEventA
CloseHandle
PulseEvent
WaitForSingleObject
ResetEvent
SetEvent
InterlockedIncrement
InterlockedDecrement
MulDiv
MultiByteToWideChar
lstrcmpiA
LCMapStringW
LCMapStringA
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetCurrentProcess
GetCurrentThreadId
VirtualAlloc
VirtualFree
GetProcAddress
GetModuleHandleA
WideCharToMultiByte
GetACP
GetLastError
GetVersionExA
LoadLibraryA
RtlUnwind
RaiseException
GetCommandLineA
GetVersion
HeapAlloc
HeapFree
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
SetUnhandledExceptionFilter
ExitProcess
TerminateProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
HeapDestroy
HeapCreate
WriteFile
HeapReAlloc
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetOEMCP
GetStringTypeA
GetStringTypeW
user32
wsprintfA
ole32
StgIsStorageFile
StgOpenStorage
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
oleaut32
VariantInit
quartz
AMGetErrorTextA
Exports
Exports
Sections
.text Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ