Static task
static1
Behavioral task
behavioral1
Sample
RunDll64.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
RunDll64.exe
Resource
win10v2004-20220812-en
General
-
Target
RunDll64.exe
-
Size
380KB
-
MD5
c801a308e51068e1e93e970df060db9f
-
SHA1
1a82c517d9b8854249b13864eec98f0cac7adac5
-
SHA256
1935f705842efbd4947d8652ce873a462129079042bead9288e918b449ff5538
-
SHA512
3545052f85beab096640d66301dcffb41af0caa709f9ce6cf8f3424c459e77647232f12f871dafed6544145cb3f8fe359766b9b70788cee625ce09d9f25f8ab2
-
SSDEEP
6144:tX2VMitZ0tZjChWFqxI7K0r3H67Fp9Wx8A+TKyjHjea9oF04:EaitZ0tlC2eI79DH67FOxC9LS
Malware Config
Signatures
Files
-
RunDll64.exe.exe windows x64
d6567d908bb884968d85fd2d64225d42
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
SetEvent
GetPrivateProfileIntW
GetPrivateProfileStringW
WritePrivateProfileStringW
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GlobalFlags
GetFileAttributesExW
GetFileTime
SystemTimeToTzSpecificLocalTime
VirtualProtect
ResetEvent
WaitForSingleObjectEx
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
LoadLibraryExA
GetSystemInfo
WriteConsoleW
GetConsoleMode
GetConsoleCP
GetStringTypeW
SetStdHandle
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetOEMCP
IsValidCodePage
FindNextFileW
FindFirstFileExW
GetTimeZoneInformation
GetFileType
LCMapStringW
GetTimeFormatW
GetDateFormatW
GetStdHandle
ExitProcess
HeapQueryInformation
GetCommandLineA
RtlPcToFileHeader
RtlUnwindEx
LocalReAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
CompareStringW
GlobalFindAtomW
GlobalAddAtomW
EncodePointer
DuplicateHandle
UnlockFile
SetFilePointer
SetEndOfFile
LockFile
GetVolumeInformationW
GetFullPathNameW
GetFileSize
FlushFileBuffers
FindFirstFileW
FindClose
CreateEventW
WaitForSingleObject
SetErrorMode
lstrcmpW
lstrcmpA
GlobalDeleteAtom
GetCurrentThread
GlobalFree
GlobalLock
GlobalUnlock
GlobalAlloc
QueryActCtxW
FindActCtxSectionStringW
DeactivateActCtx
ActivateActCtx
CreateActCtxW
LoadLibraryW
OutputDebugStringA
GetACP
OutputDebugStringW
GetTickCount
WriteFile
SetFilePointerEx
ReadFile
LocalAlloc
LoadLibraryExW
GetProcAddress
GetModuleHandleExW
GetCurrentThreadId
GetCurrentProcessId
SetCriticalSectionSpinCount
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
GetLocaleInfoW
FileTimeToSystemTime
MoveFileExW
FormatMessageW
LocalFree
GetModuleFileNameW
GetVersionExW
GetSystemDirectoryW
GetLocalTime
GetCurrentProcess
SetLastError
CloseHandle
SetFileAttributesW
GetFileSizeEx
GetFileAttributesW
FileTimeToLocalFileTime
DeleteFileW
CreateFileW
GetProcessHeap
DeleteCriticalSection
DecodePointer
HeapAlloc
RaiseException
HeapReAlloc
HeapSize
InitializeCriticalSectionEx
HeapFree
WideCharToMultiByte
GetModuleHandleW
GetCommandLineW
FreeLibrary
GetLastError
FindResourceW
LoadResource
LockResource
SizeofResource
VirtualQuery
MultiByteToWideChar
user32
DestroyMenu
TabbedTextOutW
GrayStringW
DrawTextExW
DrawTextW
InvalidateRect
KillTimer
SetTimer
RealChildWindowFromPoint
ClientToScreen
SetCursor
GetCursorPos
GetActiveWindow
TranslateMessage
GetMessageW
LoadBitmapW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
GetWindowThreadProcessId
GetSysColorBrush
ReleaseDC
GetDC
SetWindowTextW
IsWindowEnabled
ShowWindow
GetMonitorInfoW
MonitorFromWindow
WinHelpW
LoadIconW
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
GetLastActivePopup
GetTopWindow
GetClassNameW
GetClassLongPtrW
SetWindowLongPtrW
GetWindowLongPtrW
SetWindowLongW
PtInRect
CopyRect
GetSysColor
MessageBoxW
AdjustWindowRectEx
GetWindowRect
RemovePropW
GetPropW
SetPropW
RedrawWindow
ValidateRect
EndPaint
BeginPaint
SetForegroundWindow
GetForegroundWindow
UpdateWindow
SetMenu
GetMenu
EnableWindow
GetCapture
GetKeyState
GetFocus
GetDlgCtrlID
GetDlgItem
IsIconic
IsWindowVisible
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPos
DestroyWindow
IsMenu
IsWindow
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
DefWindowProcW
GetMessageTime
GetSystemMetrics
GetClientRect
SetRectEmpty
OffsetRect
GetParent
GetSubMenu
GetMenuItemID
GetMenuItemCount
PostMessageW
PostQuitMessage
CharUpperW
SendMessageW
GetScrollPos
GetWindowTextW
GetWindowLongW
GetWindow
RegisterWindowMessageW
DispatchMessageW
ScreenToClient
PeekMessageW
GetMessagePos
MapWindowPoints
LoadCursorW
gdi32
SelectObject
SetMapMode
TextOutW
SaveDC
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
OffsetViewportOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
RestoreDC
RectVisible
PtVisible
GetStockObject
GetClipBox
Escape
DeleteObject
CreateBitmap
SetTextColor
SetBkColor
GetDeviceCaps
ExtTextOutW
DeleteDC
advapi32
RegQueryValueW
RegEnumKeyW
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegEnumValueW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
shell32
ShellExecuteW
ole32
CoUninitialize
CoTaskMemFree
CoCreateGuid
CoCreateInstance
CoInitialize
oleacc
LresultFromObject
CreateStdAccessibleObject
Sections
.text Size: 249KB - Virtual size: 249KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 98KB - Virtual size: 97KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 512B - Virtual size: 244B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ