Ma
Mi
Static task
static1
Behavioral task
behavioral1
Sample
rgoc1.dll
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
rgoc1.dll
Resource
win10v2004-20220414-en
Behavioral task
behavioral3
Sample
rgoc2.dll
Resource
win7-20220414-en
Behavioral task
behavioral4
Sample
rgoc2.dll
Resource
win10v2004-20220414-en
Target
3c6b3c611939bfeab2f3490fc8f788a1566bc6bb83cb0441bc4d339ef2b31306
Size
403KB
MD5
01f7312ff796712d555f08ec47da0a13
SHA1
193a8c5eca6a3bc0c0f0e078b26eee660455fa20
SHA256
3c6b3c611939bfeab2f3490fc8f788a1566bc6bb83cb0441bc4d339ef2b31306
SHA512
5265199d8d743effeb844c4137da27f2d2226c58e2d1a685162839cf89e19d7753ee57b38eb1117695546b5a99f6081020346296673b70d7be20dfa7d5ae57b2
SSDEEP
12288:6qkyUacls3q8Wc+1KFOaSTFFPObZWhS3T:6lP8uKAxvWbZWoD
Processes:
resource | yara_rule |
---|---|
static1/unpack001/rgoc2.dll | ta505_64bit_dlls |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
LoadStringA
TlsGetValue
GetStringTypeA
VirtualAlloc
GetModuleHandleA
lstrcmpA
LoadLibraryA
WideCharToMultiByte
LCMapStringW
GetVersionExW
Sleep
GetVersionExA
ExitProcess
GetEnvironmentStrings
FormatMessageW
FreeLibrary
lstrlenA
GetOEMCP
FindClose
GetCurrentProcess
HeapFree
RaiseException
GetCommandLineA
GetVersion
RtlUnwind
TerminateProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
GetStringTypeW
GetLastError
GetCurrentThread
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
FatalAppExitA
HeapAlloc
UnhandledExceptionFilter
GetCPInfo
GetACP
HeapReAlloc
IsBadWritePtr
GetProcAddress
MultiByteToWideChar
LCMapStringA
Ma
Mi
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
GetSaveFileNameA
GetCommandLineW
GetACP
GetVersionExA
GetCurrentProcessId
GetCurrentThread
GetEnvironmentStringsW
GetCommandLineA
GetModuleHandleA
VirtualAlloc
GetEnvironmentStrings
GetProcessHeap
GetOEMCP
GetTickCount
GlobalFree
LocalFlags
GlobalAlloc
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
RtlCaptureContext
LoadImageA
_exit
freeBopp
initBopp
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ