QQLiveSearchTV
Static task
static1
Behavioral task
behavioral1
Sample
862482061de2ac664a0b09bcf80c183b174c10c9777fe1645fa2f091259da140.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
862482061de2ac664a0b09bcf80c183b174c10c9777fe1645fa2f091259da140.dll
Resource
win10v2004-20230220-en
General
-
Target
862482061de2ac664a0b09bcf80c183b174c10c9777fe1645fa2f091259da140
-
Size
757KB
-
MD5
4c54b3986847aafcdbb9a7d4a42baea9
-
SHA1
2b9da2b1f5873cac88c6b20715531a7930b2c2d0
-
SHA256
862482061de2ac664a0b09bcf80c183b174c10c9777fe1645fa2f091259da140
-
SHA512
82b1a2763cdb6c22731a404c40a151fdf5d5551cc8a3c297b9c95b1fd5d029bdbb1acd34a8f32579b3c5bdc4efd9a15d0a776b61c4cc89f88f140aee45da2b30
-
SSDEEP
12288:/+DN4Wiy/R73PLpeeO8gsr6TMrkYChF+DkrHarslIM5F2Nm8gdH:/+54O/R7MErkHjr6AI6F2Nm8gdH
Malware Config
Signatures
Files
-
862482061de2ac664a0b09bcf80c183b174c10c9777fe1645fa2f091259da140.dll windows x86
cbaa836a3d71bd7c7a9534b1c9ec84b9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
userenv
CreateEnvironmentBlock
kernel32
GetCurrentProcess
CreateFileW
GetFileSizeEx
CloseHandle
GetVersionExW
OpenProcess
SizeofResource
LockResource
LoadResource
CreateToolhelp32Snapshot
Process32FirstW
FindResourceW
Process32NextW
GetTickCount
GetModuleFileNameW
DeleteFileW
GetProcAddress
CreateProcessW
ProcessIdToSessionId
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetModuleHandleExW
GetLocalTime
GetCurrentProcessId
GetPrivateProfileStringW
WritePrivateProfileStringW
GetCurrentThreadId
WriteFile
InterlockedCompareExchange
SetFilePointer
InterlockedExchange
Sleep
EnterCriticalSection
LeaveCriticalSection
WriteConsoleW
CreateFileA
FlushFileBuffers
GetModuleHandleW
HeapDestroy
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
LoadLibraryA
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
RaiseException
InitializeCriticalSection
GetVersionExA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetLastError
GetCommandLineA
RtlUnwind
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
MultiByteToWideChar
LCMapStringA
WideCharToMultiByte
LCMapStringW
ExitProcess
VirtualFree
VirtualAlloc
HeapCreate
GetStdHandle
GetModuleFileNameA
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetConsoleCP
GetConsoleMode
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
user32
UnregisterClassA
advapi32
GetTokenInformation
CreateProcessAsUserW
OpenProcessToken
DuplicateTokenEx
LookupPrivilegeValueW
shell32
SHCreateDirectoryExW
shlwapi
PathFindFileNameW
PathRemoveFileSpecW
PathAppendW
PathFileExistsW
Exports
Exports
Sections
.text Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 648KB - Virtual size: 645KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ