SCreateInstance
Static task
static1
Behavioral task
behavioral1
Sample
b37656f9eed26d6a5aa867e189adab19783831fb48d50e762d0913010697854a.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
b37656f9eed26d6a5aa867e189adab19783831fb48d50e762d0913010697854a.dll
Resource
win10v2004-20230703-en
General
-
Target
b37656f9eed26d6a5aa867e189adab19783831fb48d50e762d0913010697854a
-
Size
241KB
-
MD5
3997efd5ba4543c4c5851388b4dbe28d
-
SHA1
6727f5087dd840d4b124f37f926f186973cdb83e
-
SHA256
b37656f9eed26d6a5aa867e189adab19783831fb48d50e762d0913010697854a
-
SHA512
4f0d7c7223151f386034f9151f232a85250c50da16515f7bc67e89d2103198433c5c4462fac288cdf0af82c81143775455448a8287674df66c39127b2ea07358
-
SSDEEP
6144:kEP/vfwgQAwbZk8/uECvIdCgXoYt828Nbv+9+Z:kEP/vfwgQAwbZkfIdCgYp2Mb29+Z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b37656f9eed26d6a5aa867e189adab19783831fb48d50e762d0913010697854a
Files
-
b37656f9eed26d6a5aa867e189adab19783831fb48d50e762d0913010697854a.dll windows x86
d51afb78f0493aafce457aaf4806fab1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
OutputDebugStringW
GetStringTypeW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetStdHandle
SetFilePointerEx
WriteConsoleW
CloseHandle
MulDiv
InterlockedDecrement
InterlockedIncrement
HeapReAlloc
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
LoadLibraryExW
FreeLibrary
FatalAppExitA
LeaveCriticalSection
EnterCriticalSection
GetModuleFileNameW
WriteFile
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
SetConsoleCtrlHandler
CreateSemaphoreW
GetModuleHandleW
GetTickCount
TlsFree
CreateFileW
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
GetCurrentProcess
Sleep
CreateEventW
InitializeCriticalSectionAndSpinCount
SetUnhandledExceptionFilter
EncodePointer
DecodePointer
RaiseException
RtlUnwind
GetCommandLineA
GetCurrentThreadId
IsDebuggerPresent
IsProcessorFeaturePresent
GetLastError
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleExW
GetProcAddress
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
HeapSize
SetLastError
GetCurrentThread
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
user32
GetDC
ReleaseDC
FillRect
InvertRect
OffsetRect
DrawIconEx
GetIconInfo
DrawTextW
gdi32
ExcludeClipRect
SetViewportOrgEx
Polyline
GetObjectW
CreateDIBSection
SetWorldTransform
GetWorldTransform
SetTextColor
SetStretchBltMode
SetRectRgn
StretchBlt
SetGraphicsMode
SetBkMode
Arc
BitBlt
Chord
CombineRgn
CreateCompatibleBitmap
CreateCompatibleDC
CreateEllipticRgnIndirect
CreateFontIndirectW
CreatePen
CreatePatternBrush
CreateRectRgn
CreateRectRgnIndirect
CreateRoundRectRgn
CreateSolidBrush
DeleteDC
DeleteObject
Ellipse
GetClipBox
GetClipRgn
GetRgnBox
GetStockObject
GetTextColor
GetTextExtentPoint32W
IntersectClipRect
OffsetRgn
PtInRegion
RectInRegion
Rectangle
RestoreDC
RoundRect
SaveDC
ExtSelectClipRgn
SelectObject
utilities
?GetName@?$SObjectImpl@UIObject@SOUI@@@SOUI@@UBEPB_WXZ
?GetID@?$SObjectImpl@UIObject@SOUI@@@SOUI@@UBEHXZ
?GetAttribute@?$SObjectImpl@UIObject@SOUI@@@SOUI@@UBE?AV?$TStringT@_WUwchar_traits@SOUI@@@2@ABV32@@Z
?DefAttributeProc@?$SObjectImpl@UIObject@SOUI@@@SOUI@@UAEJABV?$TStringT@_WUwchar_traits@SOUI@@@2@0H@Z
?AfterAttribute@?$SObjectImpl@UIObject@SOUI@@@SOUI@@UAEJABV?$TStringT@_WUwchar_traits@SOUI@@@2@0HJ@Z
?AlphaRestore@CGdiAlpha@SOUI@@SAXAAUtagALPHAINFO@2@@Z
?AlphaBackup@CGdiAlpha@SOUI@@SAHPAUHDC__@@PBUtagRECT@@AAUtagALPHAINFO@2@@Z
??0?$SObjectImpl@UIObject@SOUI@@@SOUI@@QAE@XZ
?first_attribute@xml_node@pugi@@QBE?AVxml_attribute@2@XZ
?GetObjectClass@?$SObjectImpl@UIObject@SOUI@@@SOUI@@UBEPB_WXZ
?get_userdata@xml_attribute@pugi@@QBEHXZ
?next_attribute@xml_attribute@pugi@@QBE?AV12@XZ
?value@xml_attribute@pugi@@QBEPB_WXZ
?name@xml_attribute@pugi@@QBEPB_WXZ
??Bxml_attribute@pugi@@QBEP6AXPAPAPAV01@@ZXZ
?CvtW2W@SStrCpCvt@SOUI@@SA?AV?$TStringT@_WUwchar_traits@SOUI@@@2@ABV32@I@Z
?CvtA2W@SStrCpCvt@SOUI@@SA?AV?$TStringT@_WUwchar_traits@SOUI@@@2@ABV?$TStringT@DUchar_traits@SOUI@@@2@II@Z
??1?$TStringT@_WUwchar_traits@SOUI@@@SOUI@@QAE@XZ
??0?$TStringT@_WUwchar_traits@SOUI@@@SOUI@@QAE@PB_W@Z
??0?$TStringT@_WUwchar_traits@SOUI@@@SOUI@@QAE@XZ
??1?$TStringT@DUchar_traits@SOUI@@@SOUI@@QAE@XZ
??0?$TStringT@DUchar_traits@SOUI@@@SOUI@@QAE@PBD@Z
?GetObjectType@?$SObjectImpl@UIObject@SOUI@@@SOUI@@UBEHXZ
?InitFromXml@?$SObjectImpl@UIObject@SOUI@@@SOUI@@UAEHVxml_node@pugi@@@Z
?OnInitFinished@?$SObjectImpl@UIObject@SOUI@@@SOUI@@UAEXVxml_node@pugi@@@Z
?SetAttribute@?$SObjectImpl@UIObject@SOUI@@@SOUI@@UAEJABV?$TStringT@DUchar_traits@SOUI@@@2@0H@Z
?SetAttribute@?$SObjectImpl@UIObject@SOUI@@@SOUI@@UAEJABV?$TStringT@_WUwchar_traits@SOUI@@@2@0H@Z
?SetAttribute@?$SObjectImpl@UIObject@SOUI@@@SOUI@@UAEJPBD0H@Z
??_7IObject@SOUI@@6B@
??7xml_node@pugi@@QBE_NXZ
?IsClass@?$SObjectImpl@UIObject@SOUI@@@SOUI@@UBEHPB_W@Z
msimg32
AlphaBlend
GradientFill
Exports
Exports
Sections
.text Size: 162KB - Virtual size: 162KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ