Static task
static1
Behavioral task
behavioral1
Sample
oshbpcsgo.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
oshbpcsgo.dll
Resource
win10v2004-20230220-en
General
-
Target
oshbpcsgo.dll
-
Size
184KB
-
MD5
b4a84cd85304723fdaca7aa32729bec1
-
SHA1
e38fec4b169226d48d07af933e7f9b04cf959904
-
SHA256
e76bb40494f9174cf4765987d0eff4a9f2ef036a86cf9fe9bf0cb95dba2305a4
-
SHA512
0e9470c52d6d2c2a1de0ed5277f535e078aac69b7d1b68a913271ccba33f4c6ef911cbe8352e332476d00dcfd8b22c49c9d2ed529aa8601f44cefe5f1acde449
-
SSDEEP
3072:qLsCHYdqcpuaEMsNlaSxp0TbwlMYJ1wqJxIzs4Hn:q34dTUnF5UbMRJlJxn
Malware Config
Signatures
Files
-
oshbpcsgo.dll.dll windows x86
83e57abcfc88282269db5805ebd672d6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
VirtualProtect
GetTickCount
GetModuleFileNameA
MultiByteToWideChar
GetModuleHandleA
GetProcAddress
DisableThreadLibraryCalls
SetEndOfFile
CreateFileW
CreateFileA
SetStdHandle
WriteConsoleW
LoadLibraryW
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
InterlockedIncrement
InterlockedDecrement
WideCharToMultiByte
InterlockedExchange
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
EncodePointer
DecodePointer
HeapAlloc
GetLastError
HeapFree
RtlUnwind
RaiseException
GetCurrentThreadId
GetCommandLineA
LCMapStringW
GetCPInfo
IsProcessorFeaturePresent
WriteFile
GetStdHandle
GetModuleFileNameW
GetLocaleInfoW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
SetLastError
ExitProcess
HeapCreate
HeapDestroy
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
GetConsoleCP
GetConsoleMode
FlushFileBuffers
ReadFile
SetFilePointer
CloseHandle
HeapSize
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetACP
GetOEMCP
IsValidCodePage
GetStringTypeW
HeapReAlloc
GetProcessHeap
user32
GetAsyncKeyState
CallWindowProcA
ClipCursor
SetWindowLongA
GetClipCursor
FindWindowA
GetWindowRect
d3dx9_43
D3DXCreateSprite
D3DXCreateFontA
D3DXAssembleShader
Sections
.text Size: 135KB - Virtual size: 135KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ