DllGetClassObject
DllRegisterServer
DllUnregisterServer
Run
Static task
static1
1 signatures
General
-
Target
79750b3e59c64c381067d5dd07a174e746625b64f13cefe07671042676337185
-
Size
274KB
-
MD5
57a66125dcd7b771fdbf0617e643928b
-
SHA1
6f8e8c7b1942d607f2365e7354612cc8ac53e1df
-
SHA256
79750b3e59c64c381067d5dd07a174e746625b64f13cefe07671042676337185
-
SHA512
a91b2247f7a9036aec2da6cf5451f5942c13d69e4b7654020a05b86c017f8cfc600f9778d8211bb48fab3aae3b23a64d1ee81e3dd5b67e43039fffce45570b11
-
SSDEEP
3072:2n7cb1hxUe85Ijb9QZTqPT8GZ+Y9jNyHGt42MK8gVFbtEcP7J8st7z3zGG+r6eDC:2n7c5JyuNPucNXMXgHPNtivnuku1
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 79750b3e59c64c381067d5dd07a174e746625b64f13cefe07671042676337185
Files
-
79750b3e59c64c381067d5dd07a174e746625b64f13cefe07671042676337185.dll regsvr32 windows x64
641b8b17e4eb3d0279afaa5eba9b79e9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
ntdll
NtWriteFile
NtReadVirtualMemory
RtlNtStatusToDosError
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
NtWaitForSingleObject
NtCreateThreadEx
NtProtectVirtualMemory
NtWriteVirtualMemory
NtAllocateVirtualMemory
kernel32
IsDebuggerPresent
DisableThreadLibraryCalls
GetCurrentThreadId
UnhandledExceptionFilter
InitializeSListHead
SetUnhandledExceptionFilter
GetModuleHandleW
GetSystemTimeAsFileTime
GetConsoleWindow
CreateProcessA
WriteProcessMemory
CreateFileW
CreateFileMappingW
CloseHandle
MapViewOfFile
UnmapViewOfFile
GetCurrentProcess
GetProcAddress
ReleaseSRWLockExclusive
ReleaseMutex
ReleaseSRWLockShared
GetLastError
AcquireSRWLockExclusive
GetCurrentThread
SetLastError
GetCurrentDirectoryW
GetEnvironmentVariableW
GetStdHandle
GetCurrentProcessId
WaitForSingleObject
TryAcquireSRWLockExclusive
QueryPerformanceCounter
HeapAlloc
GetProcessHeap
HeapFree
HeapReAlloc
AcquireSRWLockShared
WaitForSingleObjectEx
LoadLibraryA
CreateMutexA
GetModuleHandleA
GetConsoleMode
IsProcessorFeaturePresent
FormatMessageW
ExitProcess
MultiByteToWideChar
WriteConsoleW
TlsGetValue
TlsSetValue
psapi
GetModuleBaseNameW
EnumProcessModulesEx
user32
ShowWindow
SetWindowPos
vcruntime140
__C_specific_handler
_CxxThrowException
memset
memcmp
__std_type_info_destroy_list
memcpy
memmove
__CxxFrameHandler3
api-ms-win-crt-runtime-l1-1-0
_cexit
_initialize_onexit_table
_initterm
_initterm_e
_seh_filter_dll
_execute_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
api-ms-win-crt-heap-l1-1-0
free
Exports
Exports
Sections
.text Size: 121KB - Virtual size: 121KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 144KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 776B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ