DllRegisterServer
Static task
static1
Behavioral task
behavioral1
Sample
e4-8a7fc3fac165094a8eec90c4b4fff614.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e4-8a7fc3fac165094a8eec90c4b4fff614.dll
Resource
win10v2004-20221111-en
General
-
Target
e4-8a7fc3fac165094a8eec90c4b4fff614.dll
-
Size
437KB
-
MD5
8a7fc3fac165094a8eec90c4b4fff614
-
SHA1
04f5e84b910a7bfb22066f476e12c54e91e6d06d
-
SHA256
ebccc1951423e05e48eafdb082fef83beceabc53ac6d423832e7f862f43b7ff0
-
SHA512
c302e92f96380b46ac44f0983c8fbfea93ef6f870a66344c2a5abc37ac5aeea96ba6c5bb84eb839856982212de6a462d7f267acf2291a28e190b1bb8301ca431
-
SSDEEP
6144:Ypbe+TznjXD0s8gan6r+DgQl6QGkLh5q0xowArB25IwGEytJB8tF/:YpbYvA+8Qlvpl5H+wArMIsytUt
Malware Config
Signatures
Files
-
e4-8a7fc3fac165094a8eec90c4b4fff614.dll.dll regsvr32 windows x64
8183aa82eecf5fe4b57e02215bc08c25
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
CloseHandle
WriteConsoleW
SetFilePointerEx
SetStdHandle
GetConsoleMode
GetConsoleCP
FlushFileBuffers
EnumSystemLocalesEx
IsValidLocaleName
LCMapStringEx
GetUserDefaultLocaleName
CompareStringEx
GetDateFormatEx
GetTimeFormatEx
HeapReAlloc
LoadLibraryW
OutputDebugStringW
SetConsoleCtrlHandler
LoadLibraryExW
FreeLibrary
FatalAppExitA
LeaveCriticalSection
GetLocaleInfoEx
GetLastError
HeapFree
HeapAlloc
EncodePointer
DecodePointer
GetCommandLineA
GetCurrentThreadId
RtlPcToFileHeader
RaiseException
RtlLookupFunctionEntry
RtlUnwindEx
IsDebuggerPresent
IsProcessorFeaturePresent
GetProcessHeap
ExitProcess
GetModuleHandleExW
GetProcAddress
AreFileApisANSI
MultiByteToWideChar
GetStdHandle
WriteFile
GetModuleFileNameW
HeapSize
Sleep
SetLastError
GetCurrentThread
GetFileType
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
InitOnceExecuteOnce
GetStartupInfoW
GetModuleFileNameA
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetTickCount64
GetEnvironmentStringsW
FreeEnvironmentStringsW
WideCharToMultiByte
RtlCaptureContext
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetCurrentProcess
TerminateProcess
GetModuleHandleW
GetStringTypeW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
EnterCriticalSection
CreateFileW
user32
DispatchMessageW
DefWindowProcW
UpdateWindow
CreateWindowExW
ShowWindow
EndPaint
DestroyWindow
TranslateAcceleratorW
GetMessageW
PostQuitMessage
LoadCursorW
BeginPaint
TranslateMessage
RegisterClassExW
MessageBoxA
LoadStringW
ole32
CoCreateInstance
CoUninitialize
CoInitialize
CoLoadLibrary
CoCreateFreeThreadedMarshaler
crypt32
CryptStringToBinaryA
Exports
Exports
Sections
.text Size: 137KB - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 281KB - Virtual size: 280KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 656B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ