CreatePlugin
Static task
static1
Behavioral task
behavioral1
Sample
e079293593654b5e60543b391e4c3f73a950cc9fe1aa78bb96ed197b04da8896.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e079293593654b5e60543b391e4c3f73a950cc9fe1aa78bb96ed197b04da8896.dll
Resource
win10v2004-20220812-en
General
-
Target
e079293593654b5e60543b391e4c3f73a950cc9fe1aa78bb96ed197b04da8896
-
Size
159KB
-
MD5
17f949a32670555ddb2c3c04c9a3de46
-
SHA1
31f018bf8dfe33b6b470feb7ac7636ed0d7f0acb
-
SHA256
e079293593654b5e60543b391e4c3f73a950cc9fe1aa78bb96ed197b04da8896
-
SHA512
0cd563312c585451371450e2413e3493665d4796959b6f0c4fcdbf4003de8c36f15b10a28ef013124b5911b1ac3e17f4a16d1007e047f60cd031e73700a8790f
-
SSDEEP
3072:fQIc5VXuJrS2lwspX/GQMh1+fCDsCsW1fnxZ0iv:YIc5NuJrS2l11GFDWzAxCi
Malware Config
Signatures
Files
-
e079293593654b5e60543b391e4c3f73a950cc9fe1aa78bb96ed197b04da8896.dll windows x86
06957d55f153ef62cc71f835f2afaf40
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
uibase
?detached@CBaseWindow@UIBase@@MAEXPAUelement@html@@@Z
?ShowWindow@CBaseWindow@UIBase@@MAEHI@Z
?Show@CBaseWindow@UIBase@@QAEIH@Z
?OnCloseWindow@CBaseWindow@UIBase@@MAEHXZ
?OnCancel@CBaseWindow@UIBase@@MAEHXZ
?CallHtmFunction@CBaseWindow@UIBase@@IAE?AVvalue@sciter@@PBDABV34@@Z
?OnMessage@CBaseWindow@UIBase@@MAEJPAUHWND__@@IIJ@Z
?GetHWnd@CBaseWindow@UIBase@@QAEPAUHWND__@@XZ
?SetCloseCallBack@CBaseWindow@UIBase@@QAEXP6AXPAV12@PAX@Z1@Z
?CloseWindow@CBaseWindow@UIBase@@UAEHXZ
?OnOK@CBaseWindow@UIBase@@MAEHXZ
baseplugin
?UpdateStatusSelect@CBasePlugin@@IAEXXZ
?on_script_call@CBaseListCtrl@@MAE_NPAUelement@html@@PBDIPBVvalue@sciter@@AAV45@@Z
??0CBaseListCtrl@@QAE@PAUHWND__@@PBDPAVCWatermark@@PAVCJson@@@Z
??1CBaseListCtrl@@UAE@XZ
?GetWatermark@CBasePlugin@@UAEPAVCWatermark@@XZ
?GetSelectMgr@CBasePlugin@@UAEPAVIDataMgr@MMobile@@XZ
?GetJson@CBasePlugin@@UAEPAVCJson@@XZ
GetUserTools
?GetDevice@CBasePlugin@@UAEPAVIDevice@MMobile@@XZ
?GetDateTime@CBasePlugin@@UAEPAVAuntecDateTime@AuntecBased@@XZ
?on_script_call@CBasePlugin@@MAE_NPAUelement@html@@PBDIPBVvalue@sciter@@AAV45@@Z
?Init@CNoContentWnd@@EAEXXZ
??1CNoContentWnd@@UAE@XZ
??0CNoContentWnd@@QAE@PAUHWND__@@PBDH@Z
?UpdateCheckAll@CBaseListCtrl@@QAEXH@Z
?ShowTilebar@CLoadPlugin@@IAEXH@Z
?CheckBeginBackup@CLoadPlugin@@MAE_NXZ
?StartScan@CLoadPlugin@@MAEPAVITaskCtrl@MMobile@@XZ
?StartBackup@CLoadPlugin@@MAEPAVCAuntecBasedThread@AuntecBased@@XZ
?IsChinese@CLoadPlugin@@SA_NXZ
?IsLoad@CLoadPlugin@@UAG_NPAVIDevice@MMobile@@@Z
?IsScan@CLoadPlugin@@UAG_NXZ
?SetParam@CLoadPlugin@@UAG_NPBDPAX@Z
?Free@CLoadPlugin@@UAGXXZ
?Load@CLoadPlugin@@UAGPAVCBaseWindow@UIBase@@PAUHWND__@@PAVIDevice@MMobile@@P6G_NPAXW4MDType@6@HHPBD@Z2@Z
?DichotomiaSearch@CBasePlugin@@SAHPA_KH_K@Z
?QuickSort@CBasePlugin@@SAXPA_KPAHH@Z
?SetStatusTotalCount@CBasePlugin@@IAEXABH@Z
?ClearSelectRowid@CBasePlugin@@IAEXXZ
?PushSelectRowid@CBasePlugin@@IAEXAB_K@Z
?RestoreCheck@CBasePlugin@@MAE_N_N@Z
?OnUpdateContent@CBasePlugin@@EAEX_K@Z
?OnListCheck@CBasePlugin@@MAEXPA_KH@Z
?OnMessage@CBasePlugin@@MAEJPAUHWND__@@IIJ@Z
?StartLoad@CBasePlugin@@MAE_NXZ
?Init@CBasePlugin@@MAEXXZ
?GetMediaPlayer@CBasePlugin@@UAEPAVCMediaPlayer@@XZ
?Export@CBasePlugin@@UAGPAVITaskCtrl@MMobile@@PAVImportExportConfigure@3@P6G_NPAXW4MDType@3@HHPBD@Z1@Z
?UpdateRecoverDevice@CBasePlugin@@UAGXPAVIDevice@MMobile@@@Z
?IsRegSuccess@CBasePlugin@@UAG_NPAH@Z
?UpdateRegState@CBasePlugin@@UAGX_N@Z
?ClosePlugin@CBasePlugin@@UAGXXZ
??1CBasePlugin@@UAE@XZ
??0CBasePlugin@@QAE@W4MDType@MMobile@@@Z
?on_script_call@CNoContentWnd@@EAE_NPAUelement@html@@PBDIPBVvalue@sciter@@AAV45@@Z
kernel32
FreeEnvironmentStringsW
GetTimeZoneInformation
HeapReAlloc
OutputDebugStringW
GetConsoleCP
GetConsoleMode
SetFilePointerEx
FlushFileBuffers
SetStdHandle
WriteConsoleW
FreeLibrary
LoadLibraryW
GetProcAddress
WideCharToMultiByte
MultiByteToWideChar
SetFilePointer
WriteFile
CreateFileW
GetLastError
CloseHandle
LeaveCriticalSection
EnterCriticalSection
SetEnvironmentVariableA
DeleteCriticalSection
GetEnvironmentStringsW
GetCurrentProcessId
QueryPerformanceCounter
GetModuleFileNameA
GetFileType
GetProcessHeap
GetOEMCP
InterlockedIncrement
InterlockedDecrement
Sleep
GetStringTypeW
ExitProcess
GetModuleHandleExW
GetCommandLineA
GetCurrentThreadId
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
RaiseException
RtlUnwind
GetCPInfo
InitializeCriticalSectionAndSpinCount
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
CompareStringW
LCMapStringW
IsDebuggerPresent
HeapSize
GetStdHandle
GetModuleFileNameW
LoadLibraryExW
IsValidCodePage
GetACP
Exports
Exports
Sections
.text Size: 83KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ