CreatePlugin
Static task
static1
Behavioral task
behavioral1
Sample
8d27e7b9366d69ca887c3b533ee5c964ff43503b7e284c7bf3c36bd9e8be90b9.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8d27e7b9366d69ca887c3b533ee5c964ff43503b7e284c7bf3c36bd9e8be90b9.dll
Resource
win10v2004-20220812-en
General
-
Target
8d27e7b9366d69ca887c3b533ee5c964ff43503b7e284c7bf3c36bd9e8be90b9
-
Size
117KB
-
MD5
0c51e1e4358d3e36580f797155902aab
-
SHA1
6d49f45c41459ea6b59f1496b9287fb6fda9b11e
-
SHA256
8d27e7b9366d69ca887c3b533ee5c964ff43503b7e284c7bf3c36bd9e8be90b9
-
SHA512
85bbfed2d2c63b05e2ae28b5e68beadb491266293c8b9a0ca81697167be4e90410cffb154fb31eb4fdd9e4cbfaa506c16710f77ba9b0e54a38dc61a35f12636e
-
SSDEEP
3072:b9J+iULhc+bDGB3tzju+AqhI1RUXi+2C:JJ+lTeB3tzigI0V2C
Malware Config
Signatures
Files
-
8d27e7b9366d69ca887c3b533ee5c964ff43503b7e284c7bf3c36bd9e8be90b9.dll windows x86
32a4d2ae3873c4327f5111bb98fa9c70
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
log4z
Log4zFormat
uibase
?OnMessage@CBaseWindow@UIBase@@MAEJPAUHWND__@@IIJ@Z
?on_script_call@CBaseWindow@UIBase@@MAE_NPAUelement@html@@PBDIPBVvalue@sciter@@AAV56@@Z
??0CBaseWindow@UIBase@@QAE@PAUHWND__@@PBDW4WINDOW_TYPE@1@@Z
??1CBaseWindow@UIBase@@UAE@XZ
?GetParent@CBaseWindow@UIBase@@QAEPAUHWND__@@XZ
?CallHtmFunction@CBaseWindow@UIBase@@IAE?AVvalue@sciter@@PBDABV34@@Z
?Show@CBaseWindow@UIBase@@QAEIH@Z
?GetHWnd@CBaseWindow@UIBase@@QAEPAUHWND__@@XZ
?SetCloseCallBack@CBaseWindow@UIBase@@QAEXP6AXPAV12@PAX@Z1@Z
?CloseWindow@CBaseWindow@UIBase@@UAEHXZ
?OnOK@CBaseWindow@UIBase@@MAEHXZ
?OnCancel@CBaseWindow@UIBase@@MAEHXZ
?OnCloseWindow@CBaseWindow@UIBase@@MAEHXZ
?detached@CBaseWindow@UIBase@@MAEXPAUelement@html@@@Z
?ShowWindow@CBaseWindow@UIBase@@MAEHI@Z
baseplugin
?GetWatermark@CBasePlugin@@UAEPAVCWatermark@@XZ
?GetSelectMgr@CBasePlugin@@UAEPAVIDataMgr@MMobile@@XZ
?GetJson@CBasePlugin@@UAEPAVCJson@@XZ
GetUserTools
?GetDevice@CBasePlugin@@UAEPAVIDevice@MMobile@@XZ
?GetDateTime@CBasePlugin@@UAEPAVAuntecDateTime@AuntecBased@@XZ
?on_script_call@CBasePlugin@@MAE_NPAUelement@html@@PBDIPBVvalue@sciter@@AAV45@@Z
?on_script_call@CAttachmentCtrl@@EAE_NPAUelement@html@@PBDIPBVvalue@sciter@@AAV45@@Z
?on_script_call@CNoContentWnd@@EAE_NPAUelement@html@@PBDIPBVvalue@sciter@@AAV45@@Z
??0CBasePlugin@@QAE@W4MDType@MMobile@@@Z
??1CBasePlugin@@UAE@XZ
?ClosePlugin@CBasePlugin@@UAGXXZ
?UpdateRegState@CBasePlugin@@UAGX_N@Z
?IsRegSuccess@CBasePlugin@@UAG_NPAH@Z
?CloseWindow@CAttachmentCtrl@@MAEHXZ
?Init@CAttachmentCtrl@@MAEXXZ
?UpdateCheckAll@CAttachmentCtrl@@QAEXH@Z
??1CAttachmentCtrl@@UAE@XZ
??0CAttachmentCtrl@@QAE@PAUHWND__@@PAV?$map@_KPAV?$vector@PAUAttachmentInfo@@V?$allocator@PAUAttachmentInfo@@@std@@@std@@U?$less@_K@2@V?$allocator@U?$pair@$$CB_KPAV?$vector@PAUAttachmentInfo@@V?$allocator@PAUAttachmentInfo@@@std@@@std@@@std@@@2@@std@@PAVCBasePlugin@@@Z
?Init@CNoContentWnd@@EAEXXZ
??1CNoContentWnd@@UAE@XZ
??0CNoContentWnd@@QAE@PAUHWND__@@PBDH@Z
?ShowTilebar@CLoadPlugin@@IAEXH@Z
?CheckBeginBackup@CLoadPlugin@@MAE_NXZ
?StartScan@CLoadPlugin@@MAEPAVITaskCtrl@MMobile@@XZ
?StartBackup@CLoadPlugin@@MAEPAVCAuntecBasedThread@AuntecBased@@XZ
?IsLoad@CLoadPlugin@@UAG_NPAVIDevice@MMobile@@@Z
?IsScan@CLoadPlugin@@UAG_NXZ
?SetParam@CLoadPlugin@@UAG_NPBDPAX@Z
?Free@CLoadPlugin@@UAGXXZ
?Load@CLoadPlugin@@UAGPAVCBaseWindow@UIBase@@PAUHWND__@@PAVIDevice@MMobile@@P6G_NPAXW4MDType@6@HHPBD@Z2@Z
?SetStatusTotalCount@CBasePlugin@@IAEXABH@Z
?UpdateStatusSelect@CBasePlugin@@IAEXXZ
?ClearSelectRowid@CBasePlugin@@IAEXXZ
?RemoveSelectRowid@CBasePlugin@@IAEXAB_K@Z
?PushSelectRowid@CBasePlugin@@IAEXAB_K@Z
?AddSelectRowid@CBasePlugin@@IAE_NAB_K@Z
?RestoreCheck@CBasePlugin@@MAE_N_N@Z
?OnUpdateContent@CBasePlugin@@EAEX_K@Z
?OnListCheck@CBasePlugin@@MAEXPA_KH@Z
?OnMessage@CBasePlugin@@MAEJPAUHWND__@@IIJ@Z
?StartLoad@CBasePlugin@@MAE_NXZ
?Init@CBasePlugin@@MAEXXZ
?GetMediaPlayer@CBasePlugin@@UAEPAVCMediaPlayer@@XZ
?Export@CBasePlugin@@UAGPAVITaskCtrl@MMobile@@PAVImportExportConfigure@3@P6G_NPAXW4MDType@3@HHPBD@Z1@Z
?UpdateRecoverDevice@CBasePlugin@@UAGXPAVIDevice@MMobile@@@Z
appsetting
GetLanguageSetting
kernel32
LCMapStringW
GetStringTypeW
GetConsoleCP
GetConsoleMode
SetFilePointerEx
FlushFileBuffers
ReadFile
ReadConsoleW
SetStdHandle
CreateFileW
CloseHandle
FreeLibrary
LoadLibraryW
GetProcAddress
WideCharToMultiByte
MultiByteToWideChar
OutputDebugStringW
HeapReAlloc
GetLastError
InterlockedDecrement
ExitProcess
GetModuleHandleExW
GetCommandLineA
GetCurrentThreadId
HeapFree
HeapAlloc
RaiseException
RtlUnwind
IsDebuggerPresent
IsProcessorFeaturePresent
HeapSize
Sleep
GetStdHandle
WriteFile
GetModuleFileNameW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
LoadLibraryExW
InterlockedIncrement
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetProcessHeap
GetFileType
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
WriteConsoleW
user32
PostMessageW
Exports
Exports
Sections
.text Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ