DllRegisterServer
General
-
Target
1f41fd3e96ef1c1328d08ced03ac5e1b717a45cda8cf94a1c4ffe775e43623b8.dll
-
Size
172KB
-
MD5
2297dee946320ce03b8db35b1ae6462d
-
SHA1
5958e724e5cceca807531b2b1ea4b18a2a8698dd
-
SHA256
1f41fd3e96ef1c1328d08ced03ac5e1b717a45cda8cf94a1c4ffe775e43623b8
-
SHA512
560b1f80b5e96ae8281bbea2271476a2a38d6c55b231c4e5594d9581cf5cb0bdcfffb1cd02b4aca4249eb0e21b15ee48391c02d7170dfad410ae591243ff5188
-
SSDEEP
3072:EoUF1YzA5/iJ+PG6qOP3SCmNTxJ43nPNntucoYBqCWCpJw6vS5dTGzpsf4eP4:OQJ2P3nmpxAzoSqBC162feg
Malware Config
Extracted
zloader
mk1
mac2
https://dssdffsdf.drld/mm.php
-
build_id
43
Signatures
-
Zloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 1f41fd3e96ef1c1328d08ced03ac5e1b717a45cda8cf94a1c4ffe775e43623b8.dll
Files
-
1f41fd3e96ef1c1328d08ced03ac5e1b717a45cda8cf94a1c4ffe775e43623b8.dll.dll regsvr32 windows x86
927f59ffeb27eb8b2887974d8382a856
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CompareStringW
ExpandEnvironmentStringsW
FileTimeToSystemTime
FlushFileBuffers
FreeLibrary
GetACP
GetCommandLineW
GetConsoleCP
GetCurrentProcess
GetCurrentProcessId
GetFileAttributesW
GetFileType
GetLastError
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetProcessHeap
GetUserDefaultLCID
HeapFree
HeapSize
InitializeCriticalSection
IsValidLocale
LeaveCriticalSection
LocalAlloc
LocalFree
MultiByteToWideChar
ReadFile
ResetEvent
SetHandleCount
SetLastError
SetStdHandle
SystemTimeToFileTime
WaitForSingleObject
WriteFile
lstrcmpiW
shell32
CommandLineToArgvW
user32
CallWindowProcW
CheckMenuItem
CreateDialogParamW
CreateMenu
CreatePopupMenu
CreateWindowExW
DestroyIcon
DestroyWindow
DialogBoxIndirectParamW
DialogBoxParamW
DispatchMessageW
DrawIconEx
DrawTextW
EnableWindow
EqualRect
FillRect
GetClassWord
GetClientRect
GetDC
GetDlgItem
GetFocus
GetMenu
GetParent
GetSubMenu
GetSysColor
GetSysColorBrush
GetWindowTextW
InflateRect
InsertMenuW
InvalidateRect
InvalidateRgn
IsDialogMessageW
IsDlgButtonChecked
IsIconic
IsZoomed
LoadAcceleratorsW
LoadStringW
MapWindowPoints
MessageBeep
MoveWindow
RegisterClassExW
ReleaseDC
RemoveMenu
SetClassLongW
SetCursor
SetDlgItemTextW
SetMenuItemInfoW
SetPropW
SetWindowPlacement
SetWindowPos
SetWindowTextW
TrackPopupMenu
TranslateAcceleratorW
TranslateMessage
gdi32
CreateDIBSection
CreatePatternBrush
CreateRectRgnIndirect
EndDoc
EndPage
ExtCreatePen
GetDeviceCaps
GetObjectW
GetTextExtentPointW
GetTextMetricsA
LineTo
MoveToEx
SelectObject
SetBkMode
SetTextColor
StartPage
ole32
CoInitialize
Exports
Exports
Sections
.text Size: 151KB - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ