Static task
static1
Behavioral task
behavioral1
Sample
oneUp.db.dll
Resource
win10-20220812-en
General
-
Target
oneUp.db.dll
-
Size
608KB
-
MD5
46d935dc69d85e4b942b63f22d5b4987
-
SHA1
1a6ffd7fa1787ddf282885da80750ca91fc549a3
-
SHA256
e780f0cf56e479a41a8c47a5431629712b14fc2c0733995d25131df176c95cde
-
SHA512
90530000590f8db81fc4ea2f7e232fe2185bc589bd6b804ffdc02f2fb3bc383d44dfdc8551a5ffb637825e19e493023bd34571c150ffd7981646314b30dc1b31
-
SSDEEP
6144:/G93dcjsHUws3C4wj+T+9tiB9Px9uco9vLBr1yBVD0ttjn6Lppx:/yr0ws3sjTiBD9uXLnOQtJsx
Malware Config
Signatures
Files
-
oneUp.db.dll.dll windows x86
d2632f6acb821134ed92e8078dc06717
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
winspool.drv
GetPrinterDataExW
DeletePrinterConnectionW
gdi32
FloodFill
GetObjectA
GetDeviceGammaRamp
GetWindowOrgEx
ModifyWorldTransform
GetPixel
GetCurrentPositionEx
GetTextExtentExPointW
GetBrushOrgEx
shell32
FindExecutableW
ExtractIconW
user32
LoadAcceleratorsA
GetWindowTextA
DefFrameProcW
GetUserObjectInformationA
GetKeyboardLayout
GetKeyNameTextA
GetQueueStatus
LoadBitmapA
DestroyIcon
EqualRect
FindWindowW
DrawFrameControl
IsWindowVisible
msvcrt
toupper
_time64
strcoll
oleaut32
LHashValOfNameSysA
advapi32
LookupAccountSidW
GetOldestEventLogRecord
GetSecurityDescriptorOwner
EnumServicesStatusW
RegOpenKeyA
kernel32
GetNLSVersion
OutputDebugStringA
GetCompressedFileSizeW
GetTapePosition
GetLastError
GetQueuedCompletionStatus
WaitForSingleObjectEx
GetSystemDefaultUILanguage
EnumSystemLocalesA
GetExitCodeProcess
lstrcmpA
GetUserDefaultLCID
GetPrivateProfileIntA
VirtualAlloc
GetLogicalDriveStringsA
IsValidCodePage
GetSystemWindowsDirectoryA
GetDefaultCommConfigA
LockResource
DeleteCriticalSection
GetModuleHandleW
GetCurrentConsoleFont
GetModuleFileNameW
GetBinaryTypeW
GlobalFree
GetCommandLineA
FindNextVolumeMountPointW
GetCurrentDirectoryA
Sections
.text Size: 128KB - Virtual size: 127KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 296KB - Virtual size: 292KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 72KB - Virtual size: 81KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 76KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ