Static task
static1
Behavioral task
behavioral1
Sample
negavity.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
negavity.dll
Resource
win10v2004-20230220-en
General
-
Target
negavity.dll
-
Size
750KB
-
MD5
b2d1e4a336b4a85cd99ef29542624331
-
SHA1
cf96f9965d2b802fc323671ba5b9501245f111c3
-
SHA256
52a8f1b6b73c1199763e423c4732f01393e9a58e126e65e4d9e165af60b81634
-
SHA512
7a670ce9faef8dcfd869acaddddf2e70bc7aae1a7568622dddb4746a7188c2f447409eaabc4f67c629da7e671b61fda42b28572a09912e95d9198dec7a34278f
-
SSDEEP
12288:mLXV/Jse6+KgTg0F090gJIG8l+CSFUYursdVt1B03F000RVv+5X0O:kXV/Jse6+KgTg0G9FIGfCSNuodVt1y3H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource negavity.dll
Files
-
negavity.dll.dll windows x64
e9d70ce1ecfba133035dfcaf6f2913a1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
opengl32
wglGetProcAddress
wglGetCurrentDC
glTexParameteri
glTexImage2D
glScissor
glPolygonMode
glPixelStorei
glIsEnabled
glGetIntegerv
glGenTextures
glEnable
glDrawElements
glDisable
glDeleteTextures
glBlendFunc
glBindTexture
glViewport
glGetString
glClear
kernel32
WaitForSingleObjectEx
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
CreateThread
FreeLibraryAndExitThread
GetProcAddress
LoadLibraryA
GlobalAlloc
GlobalUnlock
GlobalLock
FreeLibrary
GetModuleHandleW
MultiByteToWideChar
WideCharToMultiByte
QueryPerformanceCounter
QueryPerformanceFrequency
GlobalFree
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetCurrentProcessId
CloseHandle
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
ResetEvent
GetLastError
CreateEventW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
user32
DefWindowProcW
UnregisterClassW
RegisterClassExW
SetWindowPos
IsWindowVisible
IsIconic
BringWindowToTop
IsZoomed
SetFocus
GetActiveWindow
GetKeyState
GetAsyncKeyState
SetCapture
ReleaseCapture
SetForegroundWindow
GetDC
SetPropW
GetPropW
RemovePropW
GetClientRect
AdjustWindowRectEx
SetCursorPos
GetCursorPos
ClipCursor
ClientToScreen
ScreenToClient
WindowFromPoint
PtInRect
GetWindowLongW
SetWindowLongW
LoadCursorW
DestroyIcon
LoadImageW
CopyIcon
GetRawInputDeviceInfoA
GetRawInputDeviceList
EnumDisplaySettingsExW
EnumDisplaySettingsW
ChangeDisplaySettingsExW
SystemParametersInfoW
ShowWindow
DestroyWindow
CreateWindowExW
RegisterDeviceNotificationW
EmptyClipboard
GetClipboardData
SetClipboardData
CloseClipboard
OpenClipboard
MessageBoxA
GetMessageTime
PeekMessageW
DispatchMessageW
TranslateMessage
SetCursor
TrackMouseEvent
EnumDisplayDevicesW
gdi32
CreateDCW
DeleteDC
GetDeviceCaps
SwapBuffers
ChoosePixelFormat
DescribePixelFormat
SetPixelFormat
shell32
DragFinish
DragQueryPoint
DragQueryFileW
DragAcceptFiles
imm32
ImmSetCompositionWindow
ImmGetContext
vcruntime140
__std_terminate
memcmp
memcpy
memmove
memset
strchr
strstr
__CxxFrameHandler3
__C_specific_handler
__std_type_info_destroy_list
api-ms-win-crt-string-l1-1-0
isprint
strncpy
strcat
strcpy
strncmp
_strdup
strcmp
strlen
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vsscanf
fclose
fflush
__stdio_common_vfprintf
__stdio_common_vsprintf
__acrt_iob_func
api-ms-win-crt-math-l1-1-0
ceil
sqrt
sqrtf
sinf
powf
fmodf
fabs
cosf
floor
api-ms-win-crt-heap-l1-1-0
realloc
calloc
malloc
free
api-ms-win-crt-utility-l1-1-0
qsort
api-ms-win-crt-runtime-l1-1-0
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_crt_atexit
_seh_filter_dll
terminate
_cexit
_initterm
_initterm_e
_configure_narrow_argv
_execute_onexit_table
Sections
.text Size: 557KB - Virtual size: 557KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 159KB - Virtual size: 159KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ