Static task
static1
Behavioral task
behavioral1
Sample
run-info.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
run-info.dll
Resource
win10v2004-20230221-en
General
-
Target
run-info.dll
-
Size
24KB
-
MD5
7ae62dac16e53981da59f529a27d3c0c
-
SHA1
99cd2fb01e9994e71030c2af6d567bdae96e42a1
-
SHA256
850d254822770fdb6efe3eb48bb7f2ab413c3599b3d5fc79819d6227f3cd3748
-
SHA512
917c888c03847d407e6aec210e0891843a00ec883d699f4c3266dee1aa1598d01819a492544e1f932fcfe95b837dacbcc2860031f5d7a2ed0c52537073b300f5
-
SSDEEP
384:T1WWaruZoK+S4aNZzlqIakmySjb3nbV+Yf5CfL3RTClFROQjdQ8+6l6/zRHo:TPRyjDnFf5CfL3tYFROOQ8e/zh
Malware Config
Signatures
Files
-
run-info.dll.dll windows x86
871d2659e33ff6c0f6fb94f72ec80328
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
minhook.x32
MH_ApplyQueued
MH_QueueEnableHook
MH_CreateHook
MH_Initialize
libcocos2d
?objectForKey@CCDictionary@cocos2d@@QAEPAVCCObject@2@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?create@CCSprite@cocos2d@@SAPAV12@XZ
?create@CCLabelBMFont@cocos2d@@SAPAV12@PBD0@Z
?sharedDirector@CCDirector@cocos2d@@SAPAV12@XZ
?getWinSize@CCDirector@cocos2d@@QAE?AVCCSize@2@XZ
??0CCPoint@cocos2d@@QAE@MM@Z
?boolValue@CCString@cocos2d@@QBE_NXZ
?intValue@CCString@cocos2d@@QBEHXZ
??0CCRect@cocos2d@@QAE@MMMM@Z
??0CCSize@cocos2d@@QAE@MM@Z
kernel32
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetProcAddress
GetModuleHandleA
VirtualProtect
CreateThread
msvcp140
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?_Xlength_error@std@@YAXPBD@Z
?uncaught_exception@std@@YA_NXZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@M@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
vcruntime140
memset
_except_handler4_common
__std_terminate
__std_exception_copy
__std_exception_destroy
_CxxThrowException
__CxxFrameHandler3
memcpy
memmove
__std_type_info_destroy_list
api-ms-win-crt-runtime-l1-1-0
_initterm
_initterm_e
_seh_filter_dll
_invalid_parameter_noinfo_noreturn
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_execute_onexit_table
_cexit
api-ms-win-crt-heap-l1-1-0
malloc
_callnewh
free
api-ms-win-crt-math-l1-1-0
floor
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ