CPlApplet
Static task
static1
Behavioral task
behavioral1
Sample
tianqin.dll
Resource
win10-20230220-en
Behavioral task
behavioral2
Sample
tianqin.dll
Resource
win7-20230220-en
Behavioral task
behavioral3
Sample
tianqin.dll
Resource
win10v2004-20230220-en
General
-
Target
tianqin.cpl
-
Size
114KB
-
MD5
76616710538d3a565c768c51d5a55abc
-
SHA1
1e92575313409eaf847a966ef1d3f001fb4631df
-
SHA256
8b960c45753593ef4f320a402c20424ab6fe775c163b65d7c03fb89f89378094
-
SHA512
718cd5bff0e72dc964d870d9c47d13ef55739345b3d450222a49c435bd0fb5df45a1ca1025ca827faf5e6e0b0e9e590229b4bce6aeaa620e23756827db17c2e4
-
SSDEEP
3072:3XfxrOJuHUIxeyVegFT2FkzDOxfCmPn7:nfRlUItt/CxqO
Malware Config
Signatures
Files
-
tianqin.cpl.dll windows x86
128c6956aa815e6a90051301482f6b85
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
ws2_32
WSACleanup
closesocket
WSAStartup
inet_addr
send
socket
connect
recv
htons
kernel32
HeapAlloc
DecodePointer
SetEndOfFile
HeapSize
WriteConsoleW
VirtualAlloc
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
InterlockedFlushSList
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ReadFile
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
HeapFree
RaiseException
GetACP
GetStdHandle
GetFileType
SetFilePointerEx
GetConsoleMode
ReadConsoleW
LCMapStringW
CloseHandle
HeapReAlloc
WriteFile
GetConsoleCP
GetStringTypeW
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
SetStdHandle
CreateFileW
FlushFileBuffers
Exports
Exports
Sections
.text Size: 73KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.sedata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ