dataCheck
setPath
Behavioral task
behavioral1
Sample
out.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
out.dll
Resource
win10v2004-20220812-en
Target
out.dll
Size
1.0MB
MD5
40cedc7e500033ef29be123ad0468020
SHA1
8582e273151c56dc4888bc590cdb0c884487eead
SHA256
c193c7ad0c5b19fc56c8a81ef11eb89efa6fa32c9091a12530bfc2d5ea14ca6a
SHA512
7718f821ecef9773bbe96ad7d069b41bed9bcd4c443092b58935fc7b560d0787ddfd1a277f29bfba5d66c6ded5b1bc34908847692c47493e2d19f193b0ec4633
SSDEEP
24576:y5gRQXtgtB3gieIBOf0OU9Zx/vqqsgy2Ye5hnw49Q:UetB7PBOf0F9Zx/9/y2YG9w
bumblebee
2408
108.30.109.238:341
107.21.49.73:412
212.227.199.94:119
26.88.252.40:148
217.243.85.139:190
50.20.147.145:346
115.58.47.223:480
150.158.205.226:428
222.132.86.189:463
112.102.174.20:379
94.49.121.33:341
131.233.140.11:104
85.118.251.137:412
183.89.9.91:295
219.98.254.216:386
33.218.244.230:266
29.167.160.212:332
78.193.54.213:166
86.214.84.193:173
98.206.43.235:371
69.178.215.238:452
139.221.92.16:250
121.232.4.189:486
41.13.84.228:481
20.228.65.94:319
100.29.163.95:141
125.118.83.42:384
152.176.82.140:269
108.157.59.172:183
239.91.7.251:266
48.192.227.189:212
105.160.138.197:201
254.253.238.214:473
167.30.25.114:450
10.137.202.46:333
198.98.59.64:443
92.236.128.103:401
24.123.2.198:217
45.147.229.47:443
94.154.149.175:121
145.226.93.229:399
117.77.158.162:433
206.12.40.143:333
105.111.151.74:373
109.215.60.10:137
85.117.103.166:354
254.84.156.177:330
236.29.84.0:144
98.17.112.196:311
198.193.204.236:349
173.217.155.212:141
205.185.115.138:443
114.107.92.111:339
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
CertVerifyCertificateChainPolicy
CertFreeCertificateChain
CertFreeCertificateChainEngine
CertFreeCertificateContext
CertCreateCertificateChainEngine
CertGetCertificateChain
InitSecurityInterfaceA
SetEvent
GetThreadContext
GetProcAddress
GetCurrentProcessId
GetModuleHandleW
CreateEventA
SetThreadContext
SetWaitableTimer
TlsSetValue
VerifyVersionInfoA
SetLastError
EnterCriticalSection
WaitForMultipleObjects
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
GetQueuedCompletionStatus
PostQueuedCompletionStatus
CreateEventW
FormatMessageW
GetLastError
TerminateThread
TlsAlloc
QueueUserAPC
CreateWaitableTimerA
LocalFree
DeleteCriticalSection
VerSetConditionMask
WideCharToMultiByte
SleepEx
TlsGetValue
TlsFree
FormatMessageA
CreateIoCompletionPort
AreFileApisANSI
ReadFile
SetHandleInformation
CreateNamedPipeA
WriteFile
TerminateProcess
GetCurrentThreadId
GetSystemDirectoryW
MultiByteToWideChar
CreateFileA
GetEnvironmentStrings
CreateProcessA
FreeEnvironmentStringsA
GetExitCodeProcess
Thread32Next
Thread32First
GetModuleHandleA
LoadLibraryA
VirtualProtectEx
OpenThread
GetModuleFileNameW
SetFilePointer
lstrlenA
CreateFileW
lstrcmpA
HeapFree
Sleep
HeapAlloc
GetProcessHeap
Wow64DisableWow64FsRedirection
ExpandEnvironmentStringsW
Wow64RevertWow64FsRedirection
GetWindowsDirectoryW
GetCurrentDirectoryW
GlobalMemoryStatusEx
VerifyVersionInfoW
GetFileAttributesW
Process32NextW
Process32FirstW
GetStdHandle
RtlCaptureContext
WaitForSingleObjectEx
ResetEvent
WriteConsoleW
ResumeThread
GetCurrentProcess
GetFileAttributesA
OpenProcess
GetModuleFileNameA
CloseHandle
CreateToolhelp32Snapshot
WaitForSingleObject
GetCPInfo
SetFilePointerEx
HeapSize
GetConsoleMode
GetConsoleCP
FlushFileBuffers
SetStdHandle
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetLocaleInfoW
LCMapStringW
CompareStringW
GetStringTypeW
GetSystemTimeAsFileTime
QueryPerformanceFrequency
QueryPerformanceCounter
RaiseException
DecodePointer
EncodePointer
RtlPcToFileHeader
RtlVirtualUnwind
HeapReAlloc
lstrcatA
GetCommandLineA
FindNextFileA
FindFirstFileExA
FindClose
GetTimeZoneInformation
GetOEMCP
IsValidCodePage
GetFileType
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetTimeFormatW
GetDateFormatW
ExitProcess
GetACP
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
CreateThread
LoadLibraryExW
FreeLibrary
RtlUnwindEx
InterlockedFlushSList
InitializeSListHead
IsProcessorFeaturePresent
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlLookupFunctionEntry
FindWindowW
GetUserNameW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
LookupPrivilegeValueA
SHGetSpecialFolderPathA
SHGetSpecialFolderPathW
CoCreateInstance
CoInitializeSecurity
CoInitializeEx
CoSetProxyBlanket
CoUninitialize
SafeArrayGetUBound
SafeArrayGetElement
SafeArrayGetLBound
SafeArrayUnaccessData
SafeArrayAccessData
SysFreeString
SysAllocString
VariantClear
VariantInit
WNetGetProviderNameW
GetAdaptersInfo
getaddrinfo
WSASocketW
WSASetLastError
select
WSAStartup
WSAGetLastError
setsockopt
connect
ioctlsocket
freeaddrinfo
getsockopt
WSASend
closesocket
WSACleanup
WSARecv
PathCombineW
StrCmpIW
StrStrIW
dataCheck
setPath
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ