DllRegisterServer
Static task
static1
Behavioral task
behavioral1
Sample
payload_cob43_d6bc129a42f0b9f717dbee9224ffd597fb00ea775d74a477f86b62f5acf27468.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
payload_cob43_d6bc129a42f0b9f717dbee9224ffd597fb00ea775d74a477f86b62f5acf27468.dll
Resource
win10v2004-20220812-en
General
-
Target
payload_cob43_d6bc129a42f0b9f717dbee9224ffd597fb00ea775d74a477f86b62f5acf27468.bin
-
Size
16KB
-
MD5
c5206089455399b50d01b9fb5483bfd8
-
SHA1
2c65bb6337cc7fc4060532b544c25d2afb50858f
-
SHA256
d6bc129a42f0b9f717dbee9224ffd597fb00ea775d74a477f86b62f5acf27468
-
SHA512
96763d080dd64704d42f08181e0c29fc77842dcaf706781057e3ef90ed0f5b31b330944a5307867f6a06f686f9c441b4929ffc673d2891f8fe966512af6537fd
-
SSDEEP
384:F4l7SXMcOGHNORnAtaKuFFnFcI4Hy0he:FM7S+GtORAtaxnFc7S0he
Malware Config
Signatures
Files
-
payload_cob43_d6bc129a42f0b9f717dbee9224ffd597fb00ea775d74a477f86b62f5acf27468.bin.dll regsvr32 windows x86
7b1658b6c0e05dedf2be6590926037ee
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
WaitForSingleObject
TerminateThread
CreateThread
HeapCreate
HeapFree
lstrlenW
HeapAlloc
GetModuleHandleA
LoadLibraryA
GetProcAddress
lstrcpynW
GetLastError
GetVersionExA
GetSystemInfo
GetWindowsDirectoryW
GetCurrentProcessId
MultiByteToWideChar
lstrcatW
GetCurrentThread
user32
CharUpperBuffW
msvcrt
_vsnwprintf
_ftol2_sse
memset
Exports
Exports
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 276B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ