DllRegisterServer
Static task
static1
Behavioral task
behavioral1
Sample
bc910112a2af9c89b4bd981a63956f0c.dll
Resource
win7-20221111-en
General
-
Target
bc910112a2af9c89b4bd981a63956f0c.dll
-
Size
801KB
-
MD5
bc910112a2af9c89b4bd981a63956f0c
-
SHA1
51305fddf426f4c67c37bdf1d457b5ac556ff3da
-
SHA256
4a027751d837878f215fed4aeede3feb3c85c9fecef120d9a30fc4f01e3983cf
-
SHA512
2984c74e565462a4c8f083fb03147a8a55ab776622c09f27877538ddfc3b6bbf97aa576ddc674e5346ba88995103eea4bc5844464b3b60ca1a0c7d5f6a6cf971
-
SSDEEP
12288:JdTsX0HaZMrfZbHYIfRejZW8qEBMiMdnRYBGQhCoeH3L6EjXI:HQp66kxEXMdnGBGjXzjXI
Malware Config
Signatures
Files
-
bc910112a2af9c89b4bd981a63956f0c.dll.dll regsvr32 windows x86
cf621fdc818390e1d9f2acf7b5277b8f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
dbghelp
SymCleanup
SymGetOptions
SymUnloadModule64
SymGetLineFromAddr64
SymGetSymFromAddr64
SymLoadModuleExW
SymSetOptions
SymInitialize
SymGetModuleInfo64
imagehlp
UnMapAndLoad
MapAndLoad
kernel32
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
DuplicateHandle
GetCurrentProcess
GetVolumeInformationW
GetShortPathNameW
CreateFileW
LocalFileTimeToFileTime
SetFileAttributesW
GetFileSizeEx
SetErrorMode
HeapAlloc
HeapFree
GetSystemTimeAsFileTime
GetCommandLineA
RtlUnwind
RaiseException
HeapReAlloc
Sleep
ExitThread
CreateThread
HeapSize
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
FatalAppExitA
VirtualFree
SetFilePointer
HeapCreate
HeapDestroy
GetStdHandle
GetModuleFileNameA
GetCurrentDirectoryA
SetCurrentDirectoryA
GetDriveTypeA
GetFullPathNameA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringW
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetTimeZoneInformation
SetConsoleCtrlHandler
InitializeCriticalSectionAndSpinCount
GetConsoleCP
GetConsoleMode
LCMapStringA
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
SetEnvironmentVariableA
WriteFile
ReadFile
lstrcmpiW
GetStringTypeExW
DeleteFileW
MoveFileW
GetCurrentDirectoryW
GlobalFlags
SystemTimeToFileTime
GetThreadLocale
GetAtomNameW
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
InterlockedIncrement
GetDiskFreeSpaceW
GetFullPathNameW
GetTempFileNameW
GetFileTime
SetFileTime
GetFileAttributesW
CreateEventW
SuspendThread
SetEvent
WaitForSingleObject
ResumeThread
SetThreadPriority
CloseHandle
GetPrivateProfileStringW
WritePrivateProfileStringW
GetPrivateProfileIntW
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesW
GetLocaleInfoW
CompareStringA
InterlockedExchange
GlobalGetAtomNameW
lstrlenA
lstrcmpA
FindFirstFileW
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileW
FindClose
InterlockedDecrement
FreeResource
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
GetVersionExW
CompareStringW
LoadLibraryA
lstrcmpW
GetVersionExA
GetModuleHandleA
GetCurrentProcessId
GetModuleFileNameW
GlobalFree
CopyFileW
GlobalSize
GlobalAlloc
GlobalLock
GlobalUnlock
lstrlenW
MulDiv
ExitProcess
GetProcAddress
LoadLibraryW
GetLastError
SetLastError
GetModuleHandleW
LocalFree
FormatMessageW
GetEnvironmentVariableW
GetWindowsDirectoryW
GetSystemDirectoryW
SearchPathW
MultiByteToWideChar
FreeLibrary
IsBadReadPtr
LoadLibraryExW
LockResource
SizeofResource
WideCharToMultiByte
FindResourceW
LoadResource
VirtualAlloc
user32
GetMenuBarInfo
DestroyMenu
ReuseDDElParam
UnpackDDElParam
GetKeyNameTextW
MapVirtualKeyW
PostQuitMessage
ValidateRect
TranslateMessage
GetMessageW
ShowOwnedPopups
IsRectEmpty
SetWindowRgn
SetTimer
KillTimer
IsZoomed
WindowFromPoint
GetSysColorBrush
GetMenuItemInfoW
GetDialogBaseUnits
UnregisterClassW
DeleteMenu
GetSystemMenu
SetParent
UnionRect
DestroyIcon
CharUpperW
GetDCEx
LockWindowUpdate
DrawMenuBar
DefMDIChildProcW
DefFrameProcW
InflateRect
GetDesktopWindow
GetActiveWindow
CreateDialogIndirectParamW
GetNextDlgTabItem
EndDialog
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuW
EnableMenuItem
CheckMenuItem
ScrollWindowEx
MoveWindow
SetWindowTextW
IsDialogMessageW
IsDlgButtonChecked
SetDlgItemTextW
SetDlgItemInt
GetDlgItemTextW
GetDlgItemInt
CheckRadioButton
CheckDlgButton
RegisterWindowMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
GetFocus
SetFocus
GetWindowTextLengthW
GetWindowTextW
LoadAcceleratorsW
SetActiveWindow
DispatchMessageW
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageW
ScrollWindow
TrackPopupMenuEx
TrackPopupMenu
GetKeyState
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
IsWindowVisible
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
EqualRect
GetScrollInfo
SetScrollInfo
CopyRect
PtInRect
SetWindowPlacement
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
GetMenu
SetWindowLongW
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindow
GetSysColor
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
ScreenToClient
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
GetWindowThreadProcessId
GetWindowLongW
GetLastActivePopup
IsWindowEnabled
MessageBoxW
LoadMenuW
GetMenuState
GetMenuStringW
AppendMenuW
GetMenuItemID
InsertMenuW
GetMenuItemCount
GetSubMenu
RemoveMenu
SetCursor
LoadCursorW
InsertMenuItemW
CreatePopupMenu
SetRectEmpty
GetCursorPos
DestroyCursor
SetCursorPos
ReleaseCapture
SetCapture
RedrawWindow
TranslateAcceleratorW
TranslateMDISysAccel
GetForegroundWindow
BringWindowToTop
CopyIcon
InvalidateRect
SystemParametersInfoW
ShowWindow
MessageBeep
EndDeferWindowPos
DeferWindowPos
MapWindowPoints
BeginDeferWindowPos
IsWindow
UpdateWindow
LoadBitmapW
GetWindowRect
GetParent
SetLastErrorEx
FillRect
SetRect
DrawIcon
LoadIconW
GetClientRect
GetSystemMetrics
SendMessageW
EnableWindow
PostMessageW
gdi32
TextOutW
ExtTextOutW
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
GetCurrentPositionEx
ArcTo
PolyDraw
PolylineTo
PolyBezierTo
ExtSelectClipRgn
GetWindowExtEx
DeleteDC
CreateDIBPatternBrushPt
CreatePatternBrush
CreateBitmap
SelectPalette
RectVisible
GetObjectType
StartDocW
PlayMetaFile
CreatePen
ExtCreatePen
CreateSolidBrush
CreateHatchBrush
GetDCOrgEx
CreateRectRgnIndirect
SetRectRgn
CombineRgn
GetMapMode
PatBlt
DPtoLP
CreateEllipticRgn
LPtoDP
Ellipse
GetTextMetricsW
GetTextExtentPoint32W
GetCharWidthW
CreateFontW
StretchDIBits
GetBkColor
PlayMetaFileRecord
PtVisible
GetViewportExtEx
SelectClipPath
CreateRectRgn
GetClipRgn
GetPixel
SetBkColor
RestoreDC
SaveDC
CreateDCW
CopyMetaFileW
GetDeviceCaps
CreateFontIndirectW
GetObjectW
Rectangle
StretchBlt
CreateCompatibleDC
CreateCompatibleBitmap
EnumMetaFile
GetStockObject
SelectClipRgn
DeleteObject
SetColorAdjustment
SetArcDirection
SetMapperFlags
SetTextCharacterExtra
SetTextJustification
SetTextAlign
MoveToEx
LineTo
OffsetClipRgn
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
ModifyWorldTransform
SetWorldTransform
SetGraphicsMode
SetTextColor
SetStretchBltMode
SetROP2
SetPolyFillMode
SetBkMode
BitBlt
comdlg32
GetFileTitleW
winspool.drv
DocumentPropertiesW
ClosePrinter
OpenPrinterW
advapi32
GetFileSecurityW
SetFileSecurityW
RegQueryValueW
RegOpenKeyW
RegEnumKeyW
RegDeleteKeyW
RegDeleteValueW
RegSetValueExW
RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW
RegSetValueW
RegCloseKey
RegCreateKeyW
shell32
DragFinish
DragQueryFileW
ExtractIconW
SHGetFileInfoW
ShellExecuteW
shlwapi
PathRemoveExtensionW
PathFindFileNameW
PathRemoveFileSpecW
PathStripToRootW
PathFindExtensionW
PathIsUNCW
ole32
WriteFmtUserTypeStg
ReadClassStg
CoTaskMemFree
WriteClassStg
ReleaseStgMedium
CoTaskMemAlloc
StringFromCLSID
OleRegGetUserType
ReadFmtUserTypeStg
CreateBindCtx
CoTreatAsClass
OleDuplicateData
CoUninitialize
CoCreateInstance
CoInitializeEx
CoDisconnectObject
StringFromGUID2
CLSIDFromString
SetConvertStg
oleaut32
SysStringByteLen
SafeArrayUnlock
SafeArrayLock
SafeArrayPutElement
SafeArrayPtrOfIndex
SafeArrayGetElement
SafeArrayCopy
SafeArrayAllocDescriptor
SafeArrayAllocData
VariantCopy
SafeArrayRedim
SafeArrayCreate
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
LoadRegTypeLi
LoadTypeLi
RegisterTypeLi
VariantInit
VariantChangeType
VariantClear
SysAllocStringLen
SysStringLen
SysFreeString
SysAllocStringByteLen
SafeArrayDestroy
SafeArrayDestroyData
SafeArrayDestroyDescriptor
VariantTimeToSystemTime
SystemTimeToVariantTime
VarDateFromStr
SysReAllocStringLen
VarCyFromStr
VarBstrFromCy
VarBstrFromDec
VarDecFromStr
VarBstrFromDate
Exports
Exports
Sections
.text Size: 477KB - Virtual size: 476KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 117KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 156KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 38KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ