CreatePlatformResourceManager
Static task
static1
Behavioral task
behavioral1
Sample
PlatformResource.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
PlatformResource.dll
Resource
win10v2004-20230220-en
General
-
Target
PlatformResource.dll
-
Size
556KB
-
MD5
df5c8d368d2b0845763656c188b1a11f
-
SHA1
c9e0437c317d23b5cf770c54c9d2f619d58759e1
-
SHA256
996e3107598f3590dc1865d564741732da01af4c012c9542e7fdcac94df4a601
-
SHA512
82f958efe708b2610075b2dc40260f9c3818b491cc5673f9bb4408a93721e8f96477d4a40207c211b156308398c8719fe5d69d987a061b958cf04a6821db53eb
-
SSDEEP
12288:kYYqjq9pD5FU3YAZQiARbzw6U+mNtxiRoJrITVMfoZ:xFqLDj9Q6siRoJrAZ
Malware Config
Signatures
Files
-
PlatformResource.dll.dll windows x86
d9a5ae9fbf19c8de9cfb94e07bb54b7a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mfc120u
ord485
ord2332
ord2226
ord2204
ord1506
ord1508
msvcr120
?terminate@@YAXXZ
_initterm_e
_initterm
_malloc_crt
_amsg_exit
__CppXcptFilter
??1type_info@@UAE@XZ
_onexit
__dllonexit
_calloc_crt
_except_handler4_common
_crt_debugger_hook
_lock
memset
free
memcpy
__CxxFrameHandler3
_CxxThrowException
memmove
_purecall
__crtUnhandledException
__crtTerminateProcess
_unlock
__clean_type_info_names_internal
kernel32
InitializeCriticalSectionAndSpinCount
OutputDebugStringW
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
IsDebuggerPresent
EncodePointer
DeleteCriticalSection
GetLastError
GetModuleHandleW
DecodePointer
fguilib
??1CMarkup@@QAE@XZ
??BCStdString@@QBEPB_WXZ
??HCStdString@@QAE?AV0@PB_W@Z
??1CResourceLoader@@QAE@XZ
?LoadResource@CResourceLoader@@QAE_NVSTRINGorID@@PB_W@Z
??0CResourceLoader@@QAE@XZ
??1CStdString@@QAE@XZ
?SetResourcePath@CPaintManagerUI@@SAXPB_W@Z
?SetResourceDll@CPaintManagerUI@@SAXPAUHINSTANCE__@@@Z
?SetInstance@CPaintManagerUI@@SAXPAUHINSTANCE__@@@Z
?GetInstancePath@CPaintManagerUI@@SA?AVCStdString@@XZ
msvcp120
?_Xbad_alloc@std@@YAXXZ
?_Xout_of_range@std@@YAXPBD@Z
?_Syserror_map@std@@YAPBDH@Z
?_Winerror_map@std@@YAPBDH@Z
?_Xlength_error@std@@YAXPBD@Z
Exports
Exports
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 543KB - Virtual size: 542KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 780B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ