DllRegisterServer
Static task
static1
Behavioral task
behavioral1
Sample
aa4b2b448a5e246888304be51ef9a65a11a53bab7899bc1b56e4fc20e1b1fd9f.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
aa4b2b448a5e246888304be51ef9a65a11a53bab7899bc1b56e4fc20e1b1fd9f.dll
Resource
win10v2004-20221111-en
General
-
Target
aa4b2b448a5e246888304be51ef9a65a11a53bab7899bc1b56e4fc20e1b1fd9f
-
Size
256KB
-
MD5
d3fb2b78fd7815878a70eac35f2945df
-
SHA1
8d6292bd0abaaf3cf8c162d8c6bf7ec16a5ffba7
-
SHA256
aa4b2b448a5e246888304be51ef9a65a11a53bab7899bc1b56e4fc20e1b1fd9f
-
SHA512
050405ec948746aebc4d0b770b586d97ad7a3771bfe5b7f427357fbb1689d09fc419dd851b8b03495379b573d8365446a27c897a3a6187614d108aee480bd9d5
-
SSDEEP
6144:xH8/y2gN1qJ2uvknuXsK+yW14LSb5kFiE:6/y9N1ruvkiEyW14LSb5kB
Malware Config
Signatures
Files
-
aa4b2b448a5e246888304be51ef9a65a11a53bab7899bc1b56e4fc20e1b1fd9f.dll regsvr32 windows x86
602bf9ab8aae7d53e8516d9a8328c391
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
GetFileSize
CreateDirectoryW
FindFirstFileW
FindClose
FindFirstFileExW
WideCharToMultiByte
GetConsoleCP
MultiByteToWideChar
Sleep
CreateThread
TerminateThread
GetThreadLocale
InitializeCriticalSection
DeleteCriticalSection
GetCurrentDirectoryW
GetLocaleInfoW
FindNextFileW
EnterCriticalSection
LeaveCriticalSection
SetFileTime
ReadFile
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetFileAttributesW
CreateEventW
ExpandEnvironmentStringsW
CreatePipe
GetStartupInfoW
CreateProcessW
GetACP
SetFilePointer
PeekNamedPipe
SetEvent
ResetEvent
TerminateProcess
DisconnectNamedPipe
ResumeThread
DeviceIoControl
FormatMessageW
GetStdHandle
DeleteFileW
GetTempPathW
CloseHandle
SizeofResource
WriteFile
CreateFileW
LoadResource
FindResourceW
GetSystemInfo
GetModuleHandleW
GetProcAddress
CreateFileA
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
LoadLibraryA
VirtualAlloc
HeapReAlloc
RtlUnwind
InitializeCriticalSectionAndSpinCount
SetStdHandle
WaitForSingleObject
GetVersionExW
InterlockedDecrement
GetCurrentThreadId
GetCommandLineA
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetConsoleMode
FlushFileBuffers
SetHandleCount
GetFileType
GetStartupInfoA
HeapFree
ExitProcess
HeapAlloc
RaiseException
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCPInfo
GetOEMCP
IsValidCodePage
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
user32
wsprintfW
advapi32
RegSetValueExA
CryptHashData
RegCloseKey
CryptDestroyHash
CryptCreateHash
RegOpenKeyExA
CryptReleaseContext
RegQueryValueExA
CryptAcquireContextW
CryptGetHashParam
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
ole32
CoCreateInstance
CoTaskMemFree
CoUninitialize
CoInitialize
ws2_32
ntohs
WSACleanup
WSAStartup
ntohl
socket
htons
send
closesocket
recv
select
connect
gethostbyname
shlwapi
PathCombineW
setupapi
SetupCopyOEMInfW
Exports
Exports
Sections
.text Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 113KB - Virtual size: 113KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ