init_xrc
Static task
static1
Behavioral task
behavioral1
Sample
d964b368279acdeef24f16c2a7a29374038d28a4ab468faef86356666805d774.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d964b368279acdeef24f16c2a7a29374038d28a4ab468faef86356666805d774.dll
Resource
win10v2004-20240508-en
General
-
Target
d964b368279acdeef24f16c2a7a29374038d28a4ab468faef86356666805d774
-
Size
108KB
-
MD5
4d867973365190a72cabfa7406b54437
-
SHA1
8d5c66fcba299447ad60ddfa1fd4d6a5612083bd
-
SHA256
d964b368279acdeef24f16c2a7a29374038d28a4ab468faef86356666805d774
-
SHA512
d7ef3e743155c04179f73476ced8a00b108da30956c06cfccc87e48f61731c2516b91838b88ec1fb00f95533041b00b25f4c5f2c581619c5506fa20353f0c34d
-
SSDEEP
1536:mcybz3l6bcFeDcZLntv0fRP7/86EycrH0xTRP2Bty:9cwCG0ycgxTRP2Bty
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d964b368279acdeef24f16c2a7a29374038d28a4ab468faef86356666805d774
Files
-
d964b368279acdeef24f16c2a7a29374038d28a4ab468faef86356666805d774.dll windows:4 windows x86 arch:x86
8874b37aed1b48ed76e0a5b9e361ab7a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
wxmsw26h_vc
?Create@wxBitmap@@UAE_NHHH@Z
?Create@wxBitmap@@UAE_NHHABVwxDC@@@Z
?Create@wxBitmap@@UAE_NPAXJHHH@Z
?CreateData@wxBitmap@@MBEPAVwxGDIImageRefData@@XZ
?SetVisible@wxGDIObject@@UAEX_N@Z
?GetVisible@wxGDIObject@@UAE_NXZ
?GetResourceHandle@wxGDIImage@@UBEPAXXZ
?IsFree@wxGDIObject@@UBE_NXZ
?FreeResource@wxGDIImage@@UAE_N_N@Z
?RealizeResource@wxGDIObject@@UAE_NXZ
?CloneRefData@wxBitmap@@MBEPAVwxObjectRefData@@PBV2@@Z
?CreateRefData@wxGDIImage@@MBEPAVwxObjectRefData@@XZ
?GetClassInfo@wxBitmap@@UBEPAVwxClassInfo@@XZ
??_7wxGDIImage@@6B@
??_7wxGDIObject@@6B@
?InitFrom@wxObject@@AAEXABV1@@Z
??1wxBitmap@@UAE@XZ
?Ref@wxObject@@QAEXABV1@@Z
?LoadBitmap@wxXmlResource@@QAE?AVwxBitmap@@ABVwxString@@@Z
?Init@wxBitmap@@IAEXXZ
??_7wxBitmap@@6B@
?LoadFile@wxIcon@@UAE_NABVwxString@@JHH@Z
?CreateData@wxIcon@@MBEPAVwxGDIImageRefData@@XZ
?CloneRefData@wxIcon@@MBEPAVwxObjectRefData@@PBV2@@Z
?GetClassInfo@wxIcon@@UBEPAVwxClassInfo@@XZ
??1wxIcon@@UAE@XZ
?LoadIcon@wxXmlResource@@QAE?AVwxIcon@@ABVwxString@@@Z
??_7wxIcon@@6B@
?AttachUnknownControl@wxXmlResource@@QAE_NABVwxString@@PAVwxWindow@@1@Z
?GetXRCID@wxXmlResource@@SAHPBD@Z
?Get@wxXmlResource@@SAPAV1@XZ
?Set@wxXmlResource@@SAPAV1@PAV1@@Z
??1wxXmlSubclassFactory@@UAE@XZ
??_7wxXmlSubclassFactory@@6B@
??0wxStringBase@@QAE@ABV0@@Z
??4wxStringBase@@QAEAAV0@ABV0@@Z
?GetName@wxXmlProperty@@QBE?AVwxString@@XZ
?GetValue@wxXmlProperty@@QBE?AVwxString@@XZ
??0wxXmlNode@@QAE@PAV0@W4wxXmlNodeType@@ABVwxString@@2PAVwxXmlProperty@@0@Z
??1wxXmlNode@@QAE@XZ
??0wxXmlNode@@QAE@W4wxXmlNodeType@@ABVwxString@@1@Z
?AddChild@wxXmlNode@@QAEXPAV1@@Z
?InsertChild@wxXmlNode@@QAEXPAV1@0@Z
?RemoveChild@wxXmlNode@@QAE_NPAV1@@Z
?AddProperty@wxXmlNode@@QAEXPAVwxXmlProperty@@@Z
?AddProperty@wxXmlNode@@QAEXABVwxString@@0@Z
?DeleteProperty@wxXmlNode@@QAE_NABVwxString@@@Z
?GetName@wxXmlNode@@QBE?AVwxString@@XZ
?GetContent@wxXmlNode@@QBE?AVwxString@@XZ
?GetPropVal@wxXmlNode@@QBE?AVwxString@@ABV2@0@Z
?HasProp@wxXmlNode@@QBE_NABVwxString@@@Z
??0wxXmlDocument@@QAE@ABVwxString@@0@Z
??1wxXmlDocument@@UAE@XZ
??0wxXmlDocument@@QAE@AAVwxInputStream@@ABVwxString@@@Z
??0wxXmlDocument@@QAE@XZ
?Load@wxXmlDocument@@QAE_NABVwxString@@0@Z
?Load@wxXmlDocument@@QAE_NAAVwxInputStream@@ABVwxString@@@Z
?Save@wxXmlDocument@@QBE_NABVwxString@@@Z
?Save@wxXmlDocument@@QBE_NAAVwxOutputStream@@@Z
?GetVersion@wxXmlDocument@@QBE?AVwxString@@XZ
?GetFileEncoding@wxXmlDocument@@QBE?AVwxString@@XZ
?GetClassInfo@wxXmlResourceHandler@@UBEPAVwxClassInfo@@XZ
??0wxXmlResourceHandler@@QAE@XZ
??1wxXmlResourceHandler@@UAE@XZ
??1wxArrayString@@QAE@XZ
??1wxBaseArrayInt@@QAE@XZ
??_7wxXmlResourceHandler@@6B@
?LoadFile@wxBitmap@@UAE_NABVwxString@@J@Z
?wxAssert@@YAXHPBDH00@Z
?IsOfClass@wxXmlResourceHandler@@IAE_NPAVwxXmlNode@@ABVwxString@@@Z
?GetNodeContent@wxXmlResourceHandler@@IAE?AVwxString@@PAVwxXmlNode@@@Z
?HasParam@wxXmlResourceHandler@@IAE_NABVwxString@@@Z
?GetParamNode@wxXmlResourceHandler@@IAEPAVwxXmlNode@@ABVwxString@@@Z
?GetParamValue@wxXmlResourceHandler@@IAE?AVwxString@@ABV2@@Z
?AddStyle@wxXmlResourceHandler@@IAEXABVwxString@@H@Z
?AddWindowStyles@wxXmlResourceHandler@@IAEXXZ
?GetStyle@wxXmlResourceHandler@@IAEHABVwxString@@H@Z
?GetText@wxXmlResourceHandler@@IAE?AVwxString@@ABV2@_N@Z
?GetID@wxXmlResourceHandler@@IAEHXZ
?GetName@wxXmlResourceHandler@@IAE?AVwxString@@XZ
?GetBool@wxXmlResourceHandler@@IAE_NABVwxString@@_N@Z
?GetLong@wxXmlResourceHandler@@IAEJABVwxString@@J@Z
?GetClassInfo@wxColour@@UBEPAVwxClassInfo@@XZ
??0wxColour@@QAE@ABV0@@Z
??4wxColour@@QAEAAV0@ABV0@@Z
??1wxColour@@UAE@XZ
?Init@wxColour@@IAEXXZ
??_7wxColour@@6B@
?GetColour@wxXmlResourceHandler@@IAE?AVwxColour@@ABVwxString@@@Z
?GetSize@wxXmlResourceHandler@@IAE?AVwxSize@@ABVwxString@@PAVwxWindow@@@Z
?GetPosition@wxXmlResourceHandler@@IAE?AVwxPoint@@ABVwxString@@@Z
?GetDimension@wxXmlResourceHandler@@IAEHABVwxString@@HPAVwxWindow@@@Z
??0wxObject@@QAE@ABV0@@Z
??0wxGDIObject@@QAE@XZ
?wxDefaultSize@@3VwxSize@@B
?GetBitmap@wxXmlResourceHandler@@IAE?AVwxBitmap@@ABVwxString@@0VwxSize@@@Z
?GetIcon@wxXmlResourceHandler@@IAE?AVwxIcon@@ABVwxString@@0VwxSize@@@Z
?DoSetNativeFontInfo@wxFont@@MAEXABUwxNativeFontInfo@@@Z
?GetNoAntiAliasing@wxFontBase@@UBE_NXZ
?SetNoAntiAliasing@wxFontBase@@UAEX_N@Z
?SetEncoding@wxFont@@UAEXW4wxFontEncoding@@@Z
?SetUnderlined@wxFont@@UAEX_N@Z
?SetFaceName@wxFont@@UAEXABVwxString@@@Z
?SetWeight@wxFont@@UAEXH@Z
?SetStyle@wxFont@@UAEXH@Z
?SetFamily@wxFont@@UAEXH@Z
?SetPixelSize@wxFont@@UAEXABVwxSize@@@Z
?SetPointSize@wxFont@@UAEXH@Z
?IsFixedWidth@wxFont@@UBE_NXZ
?GetNativeFontInfo@wxFont@@UBEPBUwxNativeFontInfo@@XZ
?GetEncoding@wxFont@@UBE?AW4wxFontEncoding@@XZ
?GetFaceName@wxFont@@UBE?AVwxString@@XZ
?GetUnderlined@wxFont@@UBE_NXZ
?GetWeight@wxFont@@UBEHXZ
?GetStyle@wxFont@@UBEHXZ
?GetFamily@wxFont@@UBEHXZ
?IsUsingSizeInPixels@wxFont@@UBE_NXZ
?GetPixelSize@wxFont@@UBE?AVwxSize@@XZ
?GetPointSize@wxFont@@UBEHXZ
?GetResourceHandle@wxFont@@UBEPAXXZ
?IsFree@wxFont@@UBE_NXZ
?FreeResource@wxFont@@UAE_N_N@Z
?RealizeResource@wxFont@@UAE_NXZ
?GetClassInfo@wxFont@@UBEPAVwxClassInfo@@XZ
??_7wxFontBase@@6B@
??1wxFont@@UAE@XZ
??4wxFont@@QAEAAV0@ABV0@@Z
?Init@wxFont@@IAEXXZ
??_7wxFont@@6B@
?GetFont@wxXmlResourceHandler@@IAE?AVwxFont@@ABVwxString@@@Z
?SetupWindow@wxXmlResourceHandler@@IAEXPAVwxWindow@@@Z
?CreateChildren@wxXmlResourceHandler@@IAEXPAVwxObject@@_N@Z
?CreateChildrenPrivately@wxXmlResourceHandler@@IAEXPAVwxObject@@PAVwxXmlNode@@@Z
?CreateResFromNode@wxXmlResource@@IAEPAVwxObject@@PAVwxXmlNode@@PAV2@1PAVwxXmlResourceHandler@@@Z
?wxXmlInitResourceModule@@YAXXZ
?SaveFile@wxBitmap@@UAE_NABVwxString@@HPBVwxPalette@@@Z
?LoadObject@wxXmlResource@@QAE_NPAVwxObject@@PAVwxWindow@@ABVwxString@@2@Z
?LoadObject@wxXmlResource@@QAEPAVwxObject@@PAVwxWindow@@ABVwxString@@1@Z
?LoadFrame@wxXmlResource@@QAE_NPAVwxFrame@@PAVwxWindow@@ABVwxString@@@Z
?LoadFrame@wxXmlResource@@QAEPAVwxFrame@@PAVwxWindow@@ABVwxString@@@Z
?LoadPanel@wxXmlResource@@QAE_NPAVwxPanel@@PAVwxWindow@@ABVwxString@@@Z
?LoadPanel@wxXmlResource@@QAEPAVwxPanel@@PAVwxWindow@@ABVwxString@@@Z
?LoadDialog@wxXmlResource@@QAE_NPAVwxDialog@@PAVwxWindow@@ABVwxString@@@Z
?LoadDialog@wxXmlResource@@QAEPAVwxDialog@@PAVwxWindow@@ABVwxString@@@Z
?LoadToolBar@wxXmlResource@@QAEPAVwxToolBar@@PAVwxWindow@@ABVwxString@@@Z
?LoadMenuBar@wxXmlResource@@QAEPAVwxMenuBar@@PAVwxWindow@@ABVwxString@@@Z
?LoadMenu@wxXmlResource@@QAEPAVwxMenu@@ABVwxString@@@Z
?AddSubclassFactory@wxXmlResource@@SAXPAVwxXmlSubclassFactory@@@Z
?ClearHandlers@wxXmlResource@@QAEXXZ
?InsertHandler@wxXmlResource@@QAEXPAVwxXmlResourceHandler@@@Z
?AddHandler@wxXmlResource@@QAEXPAVwxXmlResourceHandler@@@Z
?InitAllHandlers@wxXmlResource@@QAEXXZ
??1wxMemoryFSHandler@@UAE@XZ
?npos@wxStringBase@@2IB
?InitWith@wxStringBase@@IAEXPBDII@Z
?AddFile@wxMemoryFSHandlerBase@@SAXABVwxString@@0@Z
??_7wxObject@@6B@
??0wxString@@QAE@XZ
??_7wxFileSystem@@6B@
?OpenFile@wxFileSystem@@QAEPAVwxFSFile@@ABVwxString@@@Z
?RemoveFile@wxMemoryFSHandlerBase@@SAXABVwxString@@@Z
??0wxMemoryFSHandlerBase@@QAE@XZ
?AddHandler@wxFileSystem@@SAXPAVwxFileSystemHandler@@@Z
?Format@wxString@@SA?AV1@PBDZZ
??6wxString@@QAEAAV0@ABV0@@Z
??H@YA?AVwxString@@PBDABV0@@Z
?UnRef@wxObject@@QAEXXZ
??1wxObject@@UAE@XZ
??1wxFileSystem@@UAE@XZ
?GetClassInfo@wxFileSystemHandler@@UBEPAVwxClassInfo@@XZ
?CanOpen@wxMemoryFSHandlerBase@@UAE_NABVwxString@@@Z
?OpenFile@wxMemoryFSHandlerBase@@UAEPAVwxFSFile@@AAVwxFileSystem@@ABVwxString@@@Z
?FindNext@wxMemoryFSHandlerBase@@UAE?AVwxString@@XZ
?FindFirst@wxMemoryFSHandlerBase@@UAE?AVwxString@@ABV2@H@Z
?Load@wxXmlResource@@QAE_NABVwxString@@@Z
??0wxXmlResource@@QAE@H@Z
??1wxXmlResource@@UAE@XZ
??0wxXmlResource@@QAE@ABVwxString@@H@Z
?GetClassInfo@wxObject@@UBEPAVwxClassInfo@@XZ
?ReservedObjectFunc1@wxObject@@UAEXXZ
?ReservedObjectFunc2@wxObject@@UAEXXZ
?ReservedObjectFunc3@wxObject@@UAEXXZ
?ReservedObjectFunc4@wxObject@@UAEXXZ
?ReservedObjectFunc5@wxObject@@UAEXXZ
?ReservedObjectFunc6@wxObject@@UAEXXZ
?ReservedObjectFunc7@wxObject@@UAEXXZ
?ReservedObjectFunc8@wxObject@@UAEXXZ
?ReservedObjectFunc9@wxObject@@UAEXXZ
?CreateRefData@wxObject@@MBEPAVwxObjectRefData@@XZ
?CloneRefData@wxObject@@MBEPAVwxObjectRefData@@PBV2@@Z
??0wxString@@QAE@PBD@Z
?wxEmptyString@@3PBDB
?CreateResource@wxXmlResourceHandler@@QAEPAVwxObject@@PAVwxXmlNode@@PAV2@1@Z
??1wxString@@QAE@XZ
python23
PyModule_AddObject
PyFloat_FromDouble
Py_InitModule4
PyModule_GetDict
PyDict_SetItemString
PyExc_NameError
PyErr_SetString
PyString_FromStringAndSize
PyArg_ParseTuple
PyInt_FromLong
PyObject_GetAttr
PyCFunction_Type
_Py_ZeroStruct
PyExc_TypeError
PyNumber_Check
PyInt_AsLong
PyObject_Free
PyString_FromFormat
PyType_Type
PyObject_Malloc
PyObject_Init
_Py_NoneStruct
PyObject_CallObject
_Py_TrueStruct
PyObject_SetAttrString
PyErr_Fetch
PyObject_Str
PyErr_Clear
PyString_AsString
PyErr_Format
PyArg_ParseTupleAndKeywords
PyErr_Occurred
PyCObject_Import
Py_BuildValue
PyString_FromString
PyOS_snprintf
PyLong_FromUnsignedLong
PyCObject_FromVoidPtr
msvcrt
_initterm
_onexit
__dllonexit
strncmp
strncpy
malloc
fprintf
__CxxFrameHandler
strstr
fputs
sprintf
??2@YAPAXI@Z
free
??3@YAXPAX@Z
_adjust_fdiv
kernel32
DisableThreadLibraryCalls
Exports
Exports
Sections
.text Size: 56KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ