Oklcer
Static task
static1
Behavioral task
behavioral1
Sample
osvfjygsnv.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
osvfjygsnv.dll
Resource
win10v2004-20230220-en
General
-
Target
osvfjygsnv.dll
-
Size
5KB
-
MD5
ce6f9b8f7d47837dadcbc28281eda32f
-
SHA1
689bfd6039fce79ac4cc5381d0b19fa4bb7e06df
-
SHA256
1df04b424de6c8373b38d07f20b80176b920778478abb4c3c205e3d49b069ba2
-
SHA512
be06f1e7fd81e967e4bc51e1e2e1a08b4b9758b5c052482cbef626652131f0473ee2239d0762ccd52b8e0ab03d799f7e04d4f532329fdcbadbeecab40e5a71be
-
SSDEEP
48:qDdFu8SKSvqnZ741ka241+pllM8jAy9iH/jnRvGC/WEyIr+egBJ0ge:KdK6B41E41+hMDy9iH/NH/WdIy3J0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource osvfjygsnv.dll
Files
-
osvfjygsnv.dll.dll windows x86
9e0134fc32b0e599bb799031fbc3f945
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
EscapeCommFunction
GetDiskFreeSpaceW
WriteConsoleOutputW
EnumSystemCodePagesW
LoadLibraryW
SetEndOfFile
mapi32
ord66
ord46
ord133
ord51
ord150
ord151
msacm32
acmFilterTagEnumW
acmFilterTagDetailsA
acmFilterEnumA
acmStreamOpen
acmFormatDetailsW
acmFormatEnumW
acmStreamSize
acmDriverPriority
acmFilterChooseW
acmMetrics
acmFormatTagEnumA
acmFilterChooseA
resutils
ResUtilGetEnvironmentWithNetName
ResUtilIsPathValid
ResUtilSetPropertyParameterBlock
ResUtilSetPropertyTable
ResUtilGetDwordProperty
ClusWorkerCreate
urlmon
CoInternetCreateZoneManager
CreateAsyncBindCtx
URLDownloadToFileW
HlinkSimpleNavigateToMoniker
ReleaseBindInfo
CopyBindInfo
Extract
UrlMkGetSessionOption
HlinkSimpleNavigateToString
MkParseDisplayNameEx
URLDownloadToFileA
crypt32
CryptExportPublicKeyInfo
CryptSignMessage
CertAddCRLContextToStore
CryptDecryptAndVerifyMessageSignature
CertSetEnhancedKeyUsage
CryptSIPRetrieveSubjectGuid
rtutils
TraceVprintfExA
RouterLogRegisterW
TraceDumpExW
TracePutsExA
RouterLogDeregisterW
Exports
Exports
Sections
.text Size: 1024B - Virtual size: 816B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 190B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 176B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ