_ReflectiveLoader@4
Static task
static1
Behavioral task
behavioral1
Sample
cve-2014-4113.x86.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cve-2014-4113.x86.dll
Resource
win10v2004-20221111-en
General
-
Target
cve-2014-4113.x86.dll
-
Size
71KB
-
MD5
159801144740381f30e0ae4dfbfd62e6
-
SHA1
eb571ebfa53742df0e2e8375b7d15f94ab436a09
-
SHA256
31108a00a2c2016b0fb4d0e39fb2dbdce141ce9accf9ca0b2cbc47ab2f377cb8
-
SHA512
2ff5140a43703145f3801b1658fd36ae3ffbda7719992ccc17fef31609d63f6d72c019f845085792ec2822faa35f3c963b2e95a8b2ee957fc7b7c76bde1c2e2c
-
SSDEEP
1536:SiBePAVgkBzfmFxo4Zxc8Z6zVOf7sWjcdUmzf0XTT:FFgkx+ZEoEfzfc
Malware Config
Signatures
Files
-
cve-2014-4113.x86.dll.dll windows x86
c77c09d50c502a6439ebb92b71887151
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LocalAlloc
GetCurrentProcess
GetCurrentProcessId
CreateThread
GetCurrentThreadId
LoadLibraryA
GetVersionExA
CloseHandle
WriteConsoleW
SetFilePointerEx
SetStdHandle
GetConsoleMode
GetConsoleCP
FlushFileBuffers
LCMapStringW
GetCommandLineA
IsProcessorFeaturePresent
IsDebuggerPresent
EncodePointer
DecodePointer
GetLastError
SetLastError
ExitProcess
GetModuleHandleExW
MultiByteToWideChar
WideCharToMultiByte
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
HeapFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
EnterCriticalSection
LeaveCriticalSection
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
WriteFile
GetModuleFileNameW
LoadLibraryExW
RtlUnwind
HeapAlloc
HeapReAlloc
GetStringTypeW
OutputDebugStringW
HeapSize
CreateFileW
user32
CallNextHookEx
SetWindowsHookExA
UnhookWindowsHook
SetWindowLongA
InsertMenuItemA
EndMenu
TrackPopupMenu
DestroyMenu
CreatePopupMenu
CreateWindowExA
RegisterClassA
DefWindowProcA
PostMessageA
Exports
Exports
Sections
.text Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ