DllRegisterServer
Static task
static1
Behavioral task
behavioral1
Sample
EU39.iso
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
EU39.iso
Resource
win10v2004-20221111-en
Behavioral task
behavioral3
Sample
WW.js
Resource
win7-20220901-en
Behavioral task
behavioral4
Sample
WW.js
Resource
win10v2004-20221111-en
Behavioral task
behavioral5
Sample
animators/toothsomeness.dll
Resource
win7-20221111-en
General
-
Target
EU39.img
-
Size
970KB
-
MD5
61785c9b1a2451a094e3064d032f01cb
-
SHA1
39bbaf1ef1c7f9778257ff7c789dcbe5484459e1
-
SHA256
d8f43f9f8ee2a8ef0d826c65fb03a00618c447c1c25c1715ec5bde17544936d2
-
SHA512
f4ff56f4138ecf4101e0509d93529f2f33f595fd0f7a83ff1fd68932be33f24896057a1e2d8b0394041b7fe74e47cf5cc68b04b39e6481cca2031dcb6c11d5e7
-
SSDEEP
12288:KoEKwnONVvoo6F+DfZxL4+Dir8lkQ5z4hb0mKFX4GfOs5VBNYRbWAUWWvoYPiwBP:KoEKw9o6F+DRt4Tr8lkBhQp2QOU
Malware Config
Signatures
Files
-
EU39.img.iso .vbs
-
WW.js.js .vbs
-
animators/midweek.txt
-
animators/soloist.png.png
-
animators/toothsomeness.tmp.dll regsvr32 windows x86
9d3467d46ceec8d78b0d336f023ce11c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileA
FindClose
FindFirstFileA
FindNextFileA
SetFileAttributesA
SetFileTime
CloseHandle
ConnectNamedPipe
CreateThread
OpenThread
SuspendThread
ResumeThread
CreateNamedPipeA
CreateActCtxA
ActivateActCtx
RaiseException
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetLastError
SetLastError
GetCurrentThread
GetCurrentThreadId
HeapAlloc
HeapFree
GetModuleHandleW
GetProcAddress
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
FreeLibrary
LoadLibraryExW
LCMapStringW
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
ExitProcess
GetModuleHandleExW
GetProcessHeap
GetStringTypeW
MultiByteToWideChar
WideCharToMultiByte
HeapSize
HeapReAlloc
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
InitializeSListHead
RtlUnwind
InterlockedPushEntrySList
InterlockedFlushSList
EncodePointer
TryEnterCriticalSection
CreateEventW
Sleep
GetTickCount
SetEvent
WaitForSingleObjectEx
SignalObjectAndWait
SwitchToThread
SetThreadPriority
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
GetThreadTimes
FreeLibraryAndExitThread
GetModuleFileNameW
GetModuleHandleA
GetVersionExW
VirtualAlloc
VirtualFree
VirtualProtect
DuplicateHandle
ReleaseSemaphore
InterlockedPopEntrySList
QueryDepthSList
UnregisterWaitEx
CreateTimerQueue
LoadLibraryW
GetModuleFileNameA
FindFirstFileExA
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStdHandle
GetFileType
FlushFileBuffers
WriteFile
GetConsoleCP
GetConsoleMode
SetStdHandle
SetFilePointerEx
WriteConsoleW
DecodePointer
CreateFileW
Exports
Exports
Sections
.text Size: 185KB - Virtual size: 184KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 308KB - Virtual size: 308KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 326KB - Virtual size: 329KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
data.txt