DllRegisterServer
Static task
static1
Behavioral task
behavioral1
Sample
R7nqUDW5ZvC7NoyGobTe4YhdoiKuB1SY.dll
Resource
win7-20230621-en
General
-
Target
R7nqUDW5ZvC7NoyGobTe4YhdoiKuB1SY.dll
-
Size
319KB
-
MD5
94c7b4a741db88185edc9265ec141973
-
SHA1
927ff527f99c467c4de744ff2f6bf7cb909d52b3
-
SHA256
f33201fb5c1ef6249c07835e159304b3f8c96e4c31a15ccd7782f8eca5af3241
-
SHA512
5332ab787e15b3368d121df092c87df0c78163736bf2f2af93ace95d31d49a8853ccb5f8f0d4c1cb8bdf19343a9e4cc9d8acc3960ea8ac50e037020a6a1440a6
-
SSDEEP
6144:0kpXoj6FsBVv5QMBvRxAVYyC1R4i+8O0YS4it9WFn5tkJvrtHBkb3+Y8rSVju0:0kpXoj6Fs7vlBvRmG4t0p4C9I5WHWb3e
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource R7nqUDW5ZvC7NoyGobTe4YhdoiKuB1SY.dll
Files
-
R7nqUDW5ZvC7NoyGobTe4YhdoiKuB1SY.dll.dll regsvr32 windows x64
d872b96f004d4d21c5c8c092d254efc4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
GetConsoleOutputCP
WriteFile
HeapCreate
HeapFree
GetLastError
HeapAlloc
HeapDestroy
WaitForSingleObject
CreateEventW
SetEvent
CloseHandle
LoadLibraryW
GetConsoleMode
GetProcAddress
GetModuleHandleW
FreeLibrary
VirtualAlloc
FlushFileBuffers
SetStdHandle
HeapReAlloc
HeapSize
GetStringTypeW
GetFileType
GetStdHandle
GetProcessHeap
GetFileSizeEx
SetFilePointerEx
CreateFileW
WriteConsoleW
CreateThread
GetStartupInfoW
LCMapStringW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
RtlUnwindEx
InterlockedFlushSList
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
EncodePointer
RaiseException
RtlPcToFileHeader
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
user32
DialogBoxParamW
GetDlgItem
GetWindowLongPtrW
SetWindowTextW
SetWindowLongPtrW
SendMessageW
EndDialog
advapi32
RegDeleteKeyW
RegCreateKeyExW
ImpersonateLoggedOnUser
RegSetValueExW
LogonUserW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
ole32
CoInitialize
CoLoadLibrary
CoCreateInstance
oleaut32
SysAllocString
SysFreeString
Exports
Exports
Sections
.text Size: 95KB - Virtual size: 95KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 49KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 512B - Virtual size: 252B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 162KB - Virtual size: 161KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ