ReaperPluginEntry
Static task
static1
Behavioral task
behavioral1
Sample
c625165a57c86aff79cef8169ed3a76513af55e649174e8506cef3703d09d283.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
c625165a57c86aff79cef8169ed3a76513af55e649174e8506cef3703d09d283.dll
Resource
win10v2004-20240508-en
General
-
Target
c625165a57c86aff79cef8169ed3a76513af55e649174e8506cef3703d09d283
-
Size
142KB
-
MD5
5e4d314daee3eac550268b3f90ed99c2
-
SHA1
a4f5bf924c5b858df21233a7d8f6ce83849f9f23
-
SHA256
c625165a57c86aff79cef8169ed3a76513af55e649174e8506cef3703d09d283
-
SHA512
355898fc126ae54a3ecfa8b1496ea189811c33d8c00c9f57201cc9424f52dbadcb065150b92c8cd76c00950b3d5354d9ebcfdfbd1103a2aff8ea6f8641dcaefa
-
SSDEEP
3072:e4KYK50NsnQO6l15yrzYavxBVjJCkJPEJOLDa4U+:IVC5g3vxBBEJOF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c625165a57c86aff79cef8169ed3a76513af55e649174e8506cef3703d09d283
Files
-
c625165a57c86aff79cef8169ed3a76513af55e649174e8506cef3703d09d283.dll windows:4 windows x86 arch:x86
236eb7f8231a7fcb50dd2af3209cfc17
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetLastError
WideCharToMultiByte
FindClose
FindFirstFileA
FindFirstFileW
CreateDirectoryA
CreateDirectoryW
FindNextFileA
FindNextFileW
GetVolumeInformationA
GetDriveTypeA
WritePrivateProfileStringA
SystemTimeToFileTime
GetModuleHandleA
GetPrivateProfileIntA
GetPrivateProfileStringA
GetTickCount
DeleteFileA
DeleteFileW
MultiByteToWideChar
GetVersion
DisableThreadLibraryCalls
LocalFree
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
InitializeCriticalSection
Sleep
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetLogicalDrives
user32
LoadCursorA
GetWindowLongW
CallWindowProcW
EndPaint
BeginPaint
GetForegroundWindow
IsChild
InvalidateRgn
EndDeferWindowPos
DeferWindowPos
UpdateWindow
BeginDeferWindowPos
RegisterClassA
GetClassInfoExA
RegisterClassExA
IsWindowVisible
SetCursor
GetWindowTextLengthW
GetWindowTextW
GetWindowTextA
GetWindowLongA
EnumChildWindows
DefWindowProcA
CheckDlgButton
IsWindow
GetMenu
LoadMenuA
CreateDialogParamA
GetSubMenu
ReleaseCapture
DeleteMenu
PtInRect
DestroyWindow
InvalidateRect
RemovePropA
GetPropA
SetPropA
GetClientRect
SetWindowPos
KillTimer
SetTimer
LoadImageA
ShowWindow
PostMessageA
MessageBoxW
MessageBoxA
CreatePopupMenu
GetCursorPos
TrackPopupMenu
DestroyMenu
GetAsyncKeyState
CallWindowProcA
SetWindowLongA
GetWindowRect
ScreenToClient
GetFocus
GetClassNameA
GetParent
SetWindowTextW
SetWindowTextA
RegisterClipboardFormatA
SetFocus
InsertMenuItemW
InsertMenuItemA
SetMenuDefaultItem
EnableMenuItem
GetDlgItem
SendMessageA
wsprintfA
SendDlgItemMessageA
DialogBoxParamA
GetMenuItemCount
GetMenuItemID
SetCapture
GetCapture
CheckMenuItem
gdi32
CreateRectRgn
CombineRgn
BitBlt
DeleteObject
advapi32
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
shell32
SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHGetDesktopFolder
SHGetPathFromIDListW
ole32
OleInitialize
CoTaskMemFree
ReleaseStgMedium
CoCreateInstance
CoInitialize
comctl32
ImageList_ReplaceIcon
ImageList_Create
msvcrt
_CIpow
sprintf
localtime
gmtime
strftime
strtol
strtoul
qsort
_vsnprintf
time
strstr
wcstombs
wcscat
memmove
wcslen
_purecall
??3@YAXPAX@Z
??2@YAPAXI@Z
mbstowcs
__CxxFrameHandler
realloc
malloc
free
_ftol
floor
atof
_CxxThrowException
__dllonexit
_initterm
_adjust_fdiv
??1type_info@@UAE@XZ
_strnicmp
_stricmp
_onexit
_strdup
Exports
Exports
Sections
.text Size: 107KB - Virtual size: 106KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ