dataCheck
setPath
Behavioral task
behavioral1
Sample
out.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
out.dll
Resource
win10v2004-20220812-en
Target
out.dll
Size
1.0MB
MD5
0c8ef56d0e023dc3fcff82f85a942bc7
SHA1
d1ef37a9997f3df7c00b42a5b77cf5d7e273be16
SHA256
1f9e55d62093ddcf81cf26088a3fcbda001cf76bae9ab57ad14c6875ebdcec5b
SHA512
7315e71f47537605ad2ff7daa044ed7456af5c9aaa935f641b7116c0c8c8086909ea457f752e25c823fbf9f9391749872b5bae44bc5f9c9e75dc5393a5ca572f
SSDEEP
24576:cx2ubccfCEN1Wpv9hOQn7G9Zx/tGggFQhrxtxcZfeoX:kTCyWN9QQnq9Zx/ZgShrxtyfeo
bumblebee
0109
3.96.133.190:425
2.64.146.54:483
146.19.173.173:443
124.190.135.42:475
171.85.18.1:171
167.3.253.206:327
105.221.217.130:420
87.205.249.98:424
34.125.112.132:378
241.107.31.54:327
232.8.38.144:246
52.70.202.153:421
248.233.210.1:241
35.198.208.19:401
168.185.24.232:389
157.82.90.180:269
118.175.154.106:167
144.90.37.132:300
198.98.52.145:443
62.226.23.100:125
241.221.241.108:297
172.209.40.47:498
128.224.102.9:484
17.18.123.193:368
191.120.155.22:148
35.237.47.84:247
40.203.155.225:463
9.126.197.166:240
44.124.142.232:351
172.58.198.65:158
174.115.51.232:322
130.122.90.200:280
44.130.196.39:469
193.183.54.47:159
57.253.133.38:163
59.206.6.232:394
237.64.71.131:287
225.248.109.158:333
122.253.239.13:224
124.50.99.227:169
139.187.125.8:306
102.15.123.118:284
158.171.115.18:222
135.172.209.229:167
173.26.145.88:439
45.119.182.5:395
87.182.85.155:318
97.59.143.131:368
115.22.163.66:189
165.107.81.255:236
45.147.230.233:443
22.24.25.231:151
154.210.216.13:471
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
CertCreateCertificateChainEngine
CertVerifyCertificateChainPolicy
CertFreeCertificateChain
CertFreeCertificateChainEngine
CertFreeCertificateContext
CertGetCertificateChain
InitSecurityInterfaceA
CreateEventW
Sleep
SetEvent
GetThreadContext
GetProcAddress
GetCurrentProcessId
GetModuleHandleW
SetThreadContext
SetWaitableTimer
TlsSetValue
SetLastError
EnterCriticalSection
CreateWaitableTimerW
WaitForMultipleObjects
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
GetQueuedCompletionStatus
PostQueuedCompletionStatus
FormatMessageW
GetLastError
TerminateThread
TlsAlloc
QueueUserAPC
LocalFree
DeleteCriticalSection
VerSetConditionMask
WideCharToMultiByte
SleepEx
VerifyVersionInfoW
TlsGetValue
TlsFree
FormatMessageA
CreateIoCompletionPort
AreFileApisANSI
ReadFile
SetHandleInformation
CreateNamedPipeA
WriteFile
TerminateProcess
GetCurrentThreadId
GetSystemDirectoryW
MultiByteToWideChar
CreateFileA
GetEnvironmentStrings
CreateProcessA
FreeEnvironmentStringsA
GetExitCodeProcess
LoadLibraryW
Thread32Next
Thread32First
GetModuleHandleA
LoadLibraryA
VirtualProtectEx
OpenThread
GetModuleFileNameW
SetFilePointer
lstrlenA
CreateFileW
lstrcmpA
lstrcatA
HeapFree
HeapReAlloc
HeapAlloc
GetFileSize
GetProcessHeap
Wow64DisableWow64FsRedirection
ExpandEnvironmentStringsW
Wow64RevertWow64FsRedirection
GetWindowsDirectoryW
GetCurrentDirectoryW
GlobalMemoryStatusEx
GetFileAttributesW
GetStdHandle
RtlCaptureContext
WaitForSingleObjectEx
ResetEvent
WriteConsoleW
GetCurrentProcess
GetFileAttributesA
OpenProcess
GetModuleFileNameA
CloseHandle
Process32FirstW
Process32NextW
CreateToolhelp32Snapshot
WaitForSingleObject
SetFilePointerEx
HeapSize
GetCPInfo
GetConsoleMode
GetConsoleCP
FlushFileBuffers
SetStdHandle
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetLocaleInfoW
LCMapStringW
CompareStringW
GetStringTypeW
GetSystemTimeAsFileTime
QueryPerformanceFrequency
QueryPerformanceCounter
RaiseException
DecodePointer
EncodePointer
RtlPcToFileHeader
RtlVirtualUnwind
ResumeThread
GetCommandLineA
FindNextFileA
FindFirstFileExA
FindClose
GetTimeZoneInformation
GetOEMCP
IsValidCodePage
GetFileType
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetTimeFormatW
GetDateFormatW
ExitProcess
GetACP
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
CreateThread
LoadLibraryExW
FreeLibrary
RtlUnwindEx
InterlockedFlushSList
InitializeSListHead
IsProcessorFeaturePresent
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlLookupFunctionEntry
FindWindowW
RegQueryValueExW
GetUserNameW
RegOpenKeyExW
RegCloseKey
LookupPrivilegeValueW
SHGetSpecialFolderPathW
SHGetSpecialFolderPathA
CoCreateInstance
CoUninitialize
CoInitializeEx
CoSetProxyBlanket
CoInitializeSecurity
SafeArrayGetUBound
SafeArrayGetElement
SafeArrayGetLBound
SafeArrayUnaccessData
SafeArrayAccessData
SysFreeString
SysAllocString
VariantClear
VariantInit
WNetGetProviderNameW
GetAdaptersInfo
WSASetLastError
select
WSASend
WSASocketW
WSAGetLastError
setsockopt
getaddrinfo
ioctlsocket
freeaddrinfo
getsockopt
WSARecv
WSACleanup
connect
closesocket
WSAStartup
PathCombineW
StrCmpIW
StrStrIW
dataCheck
setPath
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ