DllRegisterServer1
Static task
static1
Behavioral task
behavioral1
Sample
78aa81912f72c1c1f91ca07a8172387b2694f140e155029e5e913d20b166aeef.dll
Resource
win7-20221111-en
General
-
Target
78aa81912f72c1c1f91ca07a8172387b2694f140e155029e5e913d20b166aeef
-
Size
340KB
-
MD5
8cae5869e6826b0b592e5ac2e6eafc19
-
SHA1
3915ebc715e3ceb76d681048d83e18077d745106
-
SHA256
78aa81912f72c1c1f91ca07a8172387b2694f140e155029e5e913d20b166aeef
-
SHA512
14805b1d039e22ac99fba363cd966852d4a19ebeb99547eabc0dc8fed89c70157c2def3f970ec7877653b3568a9aa8d284de4dbca0ee4022f21262829ad6ad02
-
SSDEEP
6144:knLnX/q0zG+QAx0eW/IS3bgdE+OLz5yT9N6LzKhkYU:kDXg+QA/6b9nn5yJNkYU
Malware Config
Signatures
Files
-
78aa81912f72c1c1f91ca07a8172387b2694f140e155029e5e913d20b166aeef.dll windows x86
89cc9d6792f17d6eec1bfb53516f1f37
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
vcruntime140
__std_type_info_destroy_list
memset
memcpy
kernel32
WriteConsoleW
SetFilePointerEx
Sleep
GetProcAddress
LoadLibraryA
GetLastError
HeapFree
GetModuleHandleW
HeapAlloc
GetProcessHeap
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
SetLastError
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
FreeLibrary
LoadLibraryExW
LCMapStringW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
ExitProcess
GetModuleHandleExW
CreateFileW
GetStringTypeW
MultiByteToWideChar
WideCharToMultiByte
HeapSize
HeapReAlloc
RtlUnwind
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
DisableThreadLibraryCalls
InitializeSListHead
CloseHandle
GetConsoleMode
GetModuleFileNameA
FindClose
FindFirstFileExA
FindNextFileA
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStdHandle
GetFileType
SetStdHandle
WriteFile
FlushFileBuffers
GetConsoleCP
user32
SetTimer
DispatchMessageA
GetMessageA
Exports
Exports
Sections
.text Size: 97KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 221KB - Virtual size: 223KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ