to7
Static task
static1
Behavioral task
behavioral1
Sample
hardcoded_loader.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
hardcoded_loader.dll
Resource
win10v2004-20220812-en
General
-
Target
hardcoded_loader.dll
-
Size
144KB
-
MD5
75aa0635014fddb64536da38c21ee93a
-
SHA1
89d448c72d49717e9eb78d639c2d17c479821c38
-
SHA256
d7588b38b2534e8683f70b90aab477c187bd1659b92bb45170b0d2b8cfc31807
-
SHA512
e7122a0cfee24e03c869e8fc15b6e015488b6e064a751220579f890531c58b6fcf55b72aa88d1b0422bb5de6c6b46af2a5ed3d2fe4f93f21ae889c2651fdba6e
-
SSDEEP
3072:/JfqPIOsXQP+/z5VJsroZ4HDRsoWZ+Mkfbw3:hfpOsAPCEXQvs
Malware Config
Signatures
Files
-
hardcoded_loader.dll.dll windows x86
2e0bf1e939529c77f0f58cb90151e49d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileType
SetEndOfFile
WriteConsoleW
CreateFileW
FindFirstFileW
GetNativeSystemInfo
FreeLibrary
HeapAlloc
HeapFree
VirtualFree
GetProcessHeap
IsBadReadPtr
GetProcAddress
VirtualAlloc
LoadLibraryA
VirtualProtect
GetLastError
EncodePointer
DecodePointer
ReadFile
HeapReAlloc
GetCommandLineA
GetCurrentThreadId
RaiseException
RtlUnwind
IsDebuggerPresent
IsProcessorFeaturePresent
InterlockedDecrement
ExitProcess
GetModuleHandleExW
AreFileApisANSI
MultiByteToWideChar
GetStdHandle
WriteFile
GetModuleFileNameW
HeapSize
Sleep
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
GetConsoleMode
ReadConsoleW
SetLastError
InterlockedIncrement
SetFilePointer
SetFilePointerEx
DeleteCriticalSection
InitOnceExecuteOnce
GetStartupInfoW
CloseHandle
GetModuleFileNameA
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetTickCount64
GetEnvironmentStringsW
FreeEnvironmentStringsW
WideCharToMultiByte
UnhandledExceptionFilter
SetUnhandledExceptionFilter
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetCurrentProcess
TerminateProcess
GetModuleHandleW
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
OutputDebugStringW
LoadLibraryW
SetStdHandle
LCMapStringEx
FlushFileBuffers
GetConsoleCP
GetStringTypeW
Exports
Exports
Sections
.text Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ