GMH
Static task
static1
Behavioral task
behavioral1
Sample
socialclub.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
socialclub.dll
Resource
win10v2004-20220812-en
General
-
Target
socialclub.dll
-
Size
372KB
-
MD5
a2fcd0cec3b411b40f321fcb1d5d3ece
-
SHA1
ebe90261999b09cf6b08b66ab23d8589a4dca631
-
SHA256
1f381e1735e70dd981102c9cd922d2ec23565b3291c046257743a14108168b82
-
SHA512
1f44436ce866934099500658c41e5cb5fa870bdd06ca6fceccab2d92900c40b0ef0b7b11e65e59093af49a602c9606623c20a803dac7489890887bfb4fcd9206
-
SSDEEP
6144:sHJKKaoOfKvgUXLfvP4W1hM7G8j0Yok0PbKFnmOGt5A:3IOYgUXT4WdkB0cnu5A
Malware Config
Signatures
Files
-
socialclub.dll.dll windows x86
8a17da8d692cc5f37cc56da9feee154e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateDirectoryA
GetProcAddress
VirtualProtect
GetLastError
GetModuleHandleA
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetModuleFileNameA
GetFileAttributesA
VirtualFree
WriteConsoleW
SetStdHandle
CreateFileA
SetFilePointerEx
WriteFile
ReadFile
GetFileSizeEx
VirtualAlloc
CloseHandle
DeleteFileA
WideCharToMultiByte
MultiByteToWideChar
HeapAlloc
HeapFree
GetProcessHeap
HeapDestroy
HeapCreate
RaiseException
QueryPerformanceCounter
EncodePointer
DecodePointer
RtlUnwind
GetCommandLineA
GetCurrentThreadId
IsDebuggerPresent
IsProcessorFeaturePresent
SetLastError
ExitProcess
GetModuleHandleExW
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
LCMapStringW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetModuleFileNameW
LoadLibraryExW
HeapReAlloc
GetStringTypeW
OutputDebugStringW
HeapSize
FlushFileBuffers
GetConsoleCP
GetConsoleMode
CreateFileW
advapi32
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptImportKey
CryptDestroyKey
CryptReleaseContext
CryptAcquireContextA
CryptVerifySignatureA
shell32
SHGetSpecialFolderPathA
Exports
Exports
Sections
.text Size: 89KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 784B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RLD0 Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.RLD1 Size: 235KB - Virtual size: 235KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ