GMH
Static task
static1
Behavioral task
behavioral1
Sample
socialclub.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
socialclub.dll
Resource
win10v2004-20220812-en
General
-
Target
socialclub.dll
-
Size
1000KB
-
MD5
53847aefa3637d966e14334af6ce234f
-
SHA1
265f6298973a24707e8847a72559ec2c8ccd683e
-
SHA256
0412f6aa5046fc637a76bed077f3f865d5c8682ac0074cc281c88003ca3fd273
-
SHA512
6531f9ab57d3b32d473b4f11c2a83aa412438d4c5fb0b72b128f6f26fd5fc16b41587efba473af880193c63829abdb2c6cd8bda9addb7d93d4e58e72c0769d68
-
SSDEEP
24576:V03fcrj0bjBmnf4O0dl6TZmvge00rTukxVgwft8Nr8QHxT+/:i3fcrj0bjBmnff0dyG00vxDl898QH1+/
Malware Config
Signatures
Files
-
socialclub.dll.dll windows x64
de84f1284fc66954a2d0ea8178f00614
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
HeapAlloc
HeapFree
GetProcessHeap
GetOverlappedResult
CancelIo
WaitForSingleObject
CreateEventA
ExitProcess
CreateThread
CreateProcessA
DisconnectNamedPipe
VirtualAlloc
VirtualProtect
CreateNamedPipeA
FileTimeToSystemTime
GetSystemInfo
VirtualQuery
GetProcAddress
CreateDirectoryA
GetFileAttributesA
WriteConsoleW
ConnectNamedPipe
GetLastError
CloseHandle
WriteFile
ReadFile
FlushFileBuffers
SetEnvironmentVariableA
GetModuleHandleA
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetModuleFileNameA
GetSystemTimeAsFileTime
VirtualFree
GetFileSizeEx
FindNextFileA
FindClose
CreateFileA
DeleteFileA
SetFilePointerEx
MultiByteToWideChar
WideCharToMultiByte
HeapCreate
RaiseException
HeapDestroy
FreeLibrary
QueryPerformanceCounter
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetCurrentProcessId
GetCurrentThreadId
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwindEx
RtlPcToFileHeader
InterlockedFlushSList
SetLastError
EncodePointer
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
GetModuleHandleExW
LCMapStringW
FindFirstFileExA
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStdHandle
GetFileType
GetStringTypeW
HeapSize
HeapReAlloc
SetStdHandle
GetConsoleCP
GetConsoleMode
CreateFileW
advapi32
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
FreeSid
CheckTokenMembership
AllocateAndInitializeSid
CryptVerifySignatureA
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptImportKey
CryptDestroyKey
CryptReleaseContext
CryptAcquireContextA
shell32
SHGetSpecialFolderPathA
Exports
Exports
Sections
.text Size: 110KB - Virtual size: 110KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 784B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RLD0 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.RLD1 Size: 816KB - Virtual size: 816KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ