mainB
Static task
static1
Behavioral task
behavioral1
Sample
TwixtorProVectorsIn_64.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
TwixtorProVectorsIn_64.dll
Resource
win10v2004-20240508-en
General
-
Target
TwixtorProVectorsIn_64.aex
-
Size
16.3MB
-
MD5
0470a08261684a6aaaeed8a368007e08
-
SHA1
5590163202af617cc9bd3c20ce95246555db0e80
-
SHA256
4202cfe5ae81dfaa4024ba23af7f0f21894d4e3b7b55b6e811d5f1c5c59f3eec
-
SHA512
2f5aafb73c7a73eabea9b3df85a57c9d445e97a9754bae5a565d2b39fbc0d3ac0a23528532345fbc8ce76cace530ec82456ab666455eda3c2fc75bdccc9f0db8
-
SSDEEP
98304:dx/e/MIq1ZbyeAkP+qlu8309mI7Pn37ZJAP7QM3ELvZb:ne/MIq1ZbyeXP+G09BPdM3ER
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource TwixtorProVectorsIn_64.aex
Files
-
TwixtorProVectorsIn_64.aex.dll windows:6 windows x64 arch:x64
ee069a399b16814f1c3d8b1c3d22a265
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
ws2_32
getservbyname
WSAStartup
WSACleanup
gethostbyname
gethostname
htons
getsockopt
ioctlsocket
socket
setsockopt
sendto
send
recvfrom
select
recv
ntohl
listen
inet_addr
WSAGetLastError
connect
closesocket
bind
accept
__WSAFDIsSet
htonl
freeaddrinfo
getaddrinfo
WSAIoctl
WSASetLastError
ntohs
getsockname
getpeername
inet_ntoa
rpcrt4
UuidCreate
UuidToStringA
RpcStringFreeA
winmm
timeGetDevCaps
timeGetTime
timeBeginPeriod
timeEndPeriod
opengl32
glDeleteTextures
glClearColor
glClear
glBlendFunc
glBindTexture
glBegin
wglGetProcAddress
wglGetCurrentDC
glGetString
glDrawBuffer
glDrawElements
glDisable
glEnableClientState
glEnd
glFinish
glGenTextures
glGetError
glGetIntegerv
glLoadIdentity
glMatrixMode
glOrtho
glPopAttrib
glPopMatrix
glPushAttrib
glPushMatrix
glReadBuffer
glTexCoord2f
glTexCoordPointer
glTexImage2D
glEnable
glTexParameteri
glVertex2f
glVertexPointer
glViewport
wglGetCurrentContext
glGetTexLevelParameteriv
glTexParameterf
wglMakeCurrent
wglDeleteContext
wglCreateContext
glDisableClientState
kernel32
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
InitializeSListHead
IsDebuggerPresent
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
GetCurrentThreadId
OutputDebugStringA
GetCurrentProcessId
GetDynamicTimeZoneInformation
GetEnvironmentVariableW
CloseHandle
GetLastError
WaitForSingleObject
GetExitCodeProcess
CreateProcessW
MultiByteToWideChar
WideCharToMultiByte
GetComputerNameExW
GetTickCount
CreateDirectoryW
CreateFileW
DeleteFileA
FindClose
FindFirstFileA
FindFirstFileW
FindNextFileA
FindNextFileW
OutputDebugStringW
HeapAlloc
HeapFree
GetProcessHeap
InitializeCriticalSectionEx
DeleteCriticalSection
GetEnvironmentVariableA
ReleaseSemaphore
WaitForMultipleObjects
GetSystemInfo
GetProcAddress
LoadLibraryA
CreateSemaphoreA
FreeLibrary
GetModuleHandleA
GetStdHandle
Sleep
AllocConsole
FreeConsole
WriteConsoleA
SetConsoleCtrlHandler
SetConsoleTitleA
QueryPerformanceCounter
QueryPerformanceFrequency
SetErrorMode
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
SetEvent
ResetEvent
SleepEx
CreateEventA
GetCurrentProcess
GetCurrentThread
SetThreadPriority
SetThreadPriorityBoost
GetThreadPriority
TerminateThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetPriorityClass
GetVersionExA
VirtualQuery
GlobalMemoryStatus
GetProcessWorkingSetSize
FormatMessageA
GetComputerNameA
SetStdHandle
GetLogicalDrives
ExitProcess
GetSystemDirectoryA
CopyFileA
FileTimeToSystemTime
CreateToolhelp32Snapshot
Process32First
Process32Next
GetModuleFileNameA
MoveFileExA
VirtualProtect
GetModuleHandleW
LoadLibraryExA
PostQueuedCompletionStatus
WaitForSingleObjectEx
LocalFree
FormatMessageW
GetModuleFileNameW
DeleteFileW
SetFileAttributesW
GetVolumePathNameW
GetVolumeNameForVolumeMountPointW
DeviceIoControl
LocalAlloc
VerSetConditionMask
SetLastError
CreateIoCompletionPort
GetQueuedCompletionStatus
InitializeCriticalSectionAndSpinCount
CreateEventW
SetWaitableTimer
QueueUserAPC
VerifyVersionInfoW
GlobalFree
OpenEventA
ResumeThread
GetSystemDirectoryW
LoadLibraryW
RtlCaptureContext
MoveFileExW
GetFileSizeEx
ReadFile
RaiseException
user32
GetParent
SetClassLongPtrA
SetWindowLongPtrA
MessageBoxA
GetWindowRect
ExitWindowsEx
GetClientRect
GetActiveWindow
SetDlgItemTextA
GetDlgItem
FindWindowA
FindWindowExA
SetWindowsHookExA
UnhookWindowsHookEx
CallNextHookEx
UnregisterClassA
DefWindowProcA
RegisterClassA
GetClassInfoA
CreateWindowExA
DestroyWindow
GetDC
ReleaseDC
LoadCursorA
LoadIconA
EnumDisplaySettingsA
SetWindowPos
gdi32
DescribePixelFormat
SetPixelFormat
CreateSolidBrush
ChoosePixelFormat
advapi32
RegQueryValueExA
SetSecurityInfo
GetSecurityInfo
SetEntriesInAclW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
GetAclInformation
GetAce
FreeSid
EqualSid
AllocateAndInitializeSid
RegOpenKeyExW
QueryServiceConfigW
OpenServiceW
OpenSCManagerW
ChangeServiceConfigW
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGenRandom
CryptGetHashParam
CryptReleaseContext
CryptAcquireContextW
RegQueryValueExW
StartServiceA
OpenServiceA
GetUserNameW
RegCloseKey
RegCreateKeyExA
RegDeleteKeyA
RegOpenKeyExA
CreateServiceA
RegSetValueExA
OpenProcessToken
OpenSCManagerA
AdjustTokenPrivileges
LookupPrivilegeValueA
GetUserNameA
CloseServiceHandle
ControlService
DeleteService
shell32
SHGetSpecialFolderPathW
SHGetFolderPathW
ole32
CoInitializeEx
CoSetProxyBlanket
CoUninitialize
CoCreateInstance
oleaut32
SafeArrayGetElement
SysStringLen
SysFreeString
SysAllocStringLen
SysAllocString
VariantClear
msvcp140
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?exceptions@ios_base@std@@QEAAXH@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?always_noconv@codecvt_base@std@@QEBA_NXZ
?uncaught_exceptions@std@@YAHXZ
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@V?$fpos@U_Mbstatet@@@2@@Z
?_Syserror_map@std@@YAPEBDH@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ
?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?__ExceptionPtrCreate@@YAXPEAX@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?__ExceptionPtrRethrow@@YAXPEBX@Z
?set_new_handler@std@@YAP6AXXZP6AXXZ@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
?_Execute_once@std@@YAHAEAUonce_flag@1@P6AHPEAX1PEAPEAX@Z1@Z
?_Xout_of_range@std@@YAXPEBD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
?write@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@PEB_W_J@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
?tellp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
?id@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@2V0locale@2@A
?id@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAGXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAHXZ
?_Xbad_alloc@std@@YAXXZ
?_Xlength_error@std@@YAXPEBD@Z
?uncaught_exception@std@@YA_NXZ
_Xtime_get_ticks
_Mtx_init_in_situ
_Mtx_destroy_in_situ
_Mtx_lock
_Mtx_unlock
?_Throw_C_error@std@@YAXH@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?_Xbad_function_call@std@@YAXXZ
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
??Bid@locale@std@@QEAA_KXZ
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
?_Ipfx@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA_N_N@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@AEAH@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?put@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@DPEBUtm@@PEBD3@Z
?_Getcat@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?get@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QEBA?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AEAVios_base@2@AEAHPEAUtm@@PEB_W4@Z
?_Getcat@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAXAEBVlocale@2@@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAPEAV12@PEA_W_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
iphlpapi
GetAdaptersInfo
GetIpAddrTable
shlwapi
PathAppendW
winhttp
WinHttpCloseHandle
WinHttpSetTimeouts
WinHttpGetProxyForUrl
WinHttpGetIEProxyConfigForCurrentUser
WinHttpOpen
bcrypt
BCryptCloseAlgorithmProvider
BCryptGenRandom
BCryptOpenAlgorithmProvider
crypt32
CryptQueryObject
CertEnumCertificatesInStore
CertFindCertificateInStore
CertFreeCertificateContext
CertOpenStore
CryptStringToBinaryW
CertFreeCertificateChain
CertGetCertificateChain
CertFreeCertificateChainEngine
CertCreateCertificateChainEngine
CertCloseStore
CertGetNameStringW
CertFindExtension
CertAddCertificateContextToStore
CryptDecodeObjectEx
PFXImportCertStore
vcruntime140
_CxxThrowException
wcschr
memcpy
__std_terminate
memset
__std_exception_copy
__std_exception_destroy
memmove
_purecall
strchr
memcmp
strstr
strrchr
__CxxFrameHandler3
wcsrchr
__std_type_info_compare
__std_type_info_name
wcsstr
__C_specific_handler
__C_specific_handler_noexcept
__current_exception
__current_exception_context
__std_type_info_destroy_list
__RTDynamicCast
memchr
vcruntime140_1
__CxxFrameHandler4
api-ms-win-crt-stdio-l1-1-0
_getcwd
_close
_open
_read
_write
_wfopen_s
__stdio_common_vsprintf_s
__stdio_common_vswprintf
__stdio_common_vsnprintf_s
fflush
__stdio_common_vsprintf
fclose
ftell
ungetc
fputs
_fseeki64
_wfopen
fsetpos
fputc
fgetpos
_get_stream_buffer_pointers
_get_osfhandle
tmpnam
setvbuf
fwrite
fseek
freopen
_fileno
fopen
fgets
_ftelli64
__stdio_common_vfprintf
rewind
fgetc
__acrt_iob_func
fread
__stdio_common_vsscanf
api-ms-win-crt-heap-l1-1-0
_aligned_free
_aligned_malloc
_callnewh
calloc
malloc
free
realloc
api-ms-win-crt-math-l1-1-0
fmod
cosf
log10f
_dsign
_dclass
atanf
asinf
atan2f
atan2
asin
sinf
tanf
ceilf
_finite
tan
_ldclass
log2f
atan
_hypotf
cos
cbrt
sin
sqrt
ceil
floor
hypot
fmodf
acosf
sqrtf
exp
_finitef
floorf
_isnan
acos
log
logf
expf
powf
pow
api-ms-win-crt-utility-l1-1-0
rand
qsort
srand
api-ms-win-crt-runtime-l1-1-0
_invalid_parameter_noinfo
terminate
signal
_statusfp
_getpid
_beginthread
_endthread
_control87
_endthreadex
_beginthreadex
_invalid_parameter_noinfo_noreturn
strerror_s
strerror
_errno
exit
__sys_nerr
_initterm_e
_initterm
_cexit
_wassert
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
api-ms-win-crt-string-l1-1-0
strncmp
_stricmp
wcscpy_s
strncpy
isalpha
wcsncpy
strspn
isxdigit
strcspn
isdigit
isupper
wcsncmp
wcspbrk
strcmp
isspace
isprint
tolower
_strdup
wcsncat
towupper
iswalnum
wcscmp
_wcsdup
toupper
api-ms-win-crt-time-l1-1-0
_difftime64
_time64
_localtime64
_mktime64
_mkgmtime64
_localtime64_s
_gmtime64_s
_ctime64
_gmtime64
strftime
api-ms-win-crt-locale-l1-1-0
localeconv
api-ms-win-crt-convert-l1-1-0
atol
atof
mbstowcs
mbstowcs_s
wcstoull
_wcstoui64
strtoll
atoi
strtol
strtoul
wcstombs
api-ms-win-crt-environment-l1-1-0
getenv
api-ms-win-crt-filesystem-l1-1-0
_unlink
_unlock_file
_stat64
rename
_lock_file
_wstat64i32
remove
_chmod
_rmdir
_access
_mkdir
_stat64i32
_fstat64i32
Exports
Exports
Sections
.text Size: 9.4MB - Virtual size: 9.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4.3MB - Virtual size: 4.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 251KB - Virtual size: 250KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 872B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ