DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Behavioral task
behavioral1
Sample
9f4d7572082de6004242d974a762f91aa4f14ebcc4f6b089fe4b267d204538e7.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
9f4d7572082de6004242d974a762f91aa4f14ebcc4f6b089fe4b267d204538e7.dll
Resource
win10v2004-20230831-en
Target
9f4d7572082de6004242d974a762f91aa4f14ebcc4f6b089fe4b267d204538e7
Size
2.0MB
MD5
8a098610e5728b65c645e0bf52bc2079
SHA1
2e9ed6e728c49f813ef99bdabcf1a18d82c88435
SHA256
9f4d7572082de6004242d974a762f91aa4f14ebcc4f6b089fe4b267d204538e7
SHA512
132909464b0aafa4f0f841849b1d5a8b7c2dcf77a9dda17d4b7d486cf413debf6b975d2595d9880a4b86212f8de3caec2c928e2e89fc1e72fb3e90bdfb87fff2
SSDEEP
49152:CB/Bv6Z9vqoMiWW82c6u21cQiaRTIwdeYwgfzO6huVTJ6kR:CBJv6Z9vqoNWR2Q21cQiwVwg7O6huV
resource | yara_rule |
---|---|
sample | family_blackmoon |
Checks for missing Authenticode signature.
resource |
---|
9f4d7572082de6004242d974a762f91aa4f14ebcc4f6b089fe4b267d204538e7 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
FreeLibraryAndExitThread
InterlockedExchange
HeapCreate
HeapDestroy
lstrcpynA
SetLastError
lstrcmpiA
GlobalDeleteAtom
InterlockedIncrement
InterlockedDecrement
LocalFree
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
lstrcpyA
LocalAlloc
TlsAlloc
GlobalHandle
TlsFree
GlobalReAlloc
TlsSetValue
LocalReAlloc
TlsGetValue
SetErrorMode
lstrcatA
GetVersion
GlobalFlags
WritePrivateProfileStringA
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GetProcessVersion
GetCPInfo
GetOEMCP
RtlUnwind
RaiseException
HeapSize
GetACP
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
IsBadWritePtr
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
IsBadCodePtr
SetStdHandle
lstrlenA
VirtualAlloc
VirtualFree
CreateFileA
GetVersionExA
GetCurrentThread
GetProcessHeap
FreeLibrary
WideCharToMultiByte
MultiByteToWideChar
Sleep
CreateThread
TerminateProcess
lstrcmpA
GetCurrentThreadId
MapViewOfFile
UnmapViewOfFile
CreateFileMappingA
GetLastError
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
CloseHandle
GetCurrentProcessId
GetCurrentProcess
VirtualProtect
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetProcAddress
LoadLibraryA
GetModuleFileNameA
GetCommandLineA
IsBadReadPtr
HeapFree
HeapReAlloc
HeapAlloc
ExitProcess
GetModuleHandleA
TabbedTextOutA
DrawTextA
GrayStringA
GetSystemMetrics
UnregisterClassA
PtInRect
GetDlgCtrlID
GetWindowPlacement
SystemParametersInfoA
RegisterWindowMessageA
GetMessagePos
GetMessageTime
DefWindowProcA
RemovePropA
GetPropA
SetPropA
GetClassLongA
DestroyWindow
GetMenu
RegisterClassA
GetClassInfoA
WinHelpA
GetCapture
GetTopWindow
CopyRect
AdjustWindowRectEx
GetSysColor
MapWindowPoints
LoadIconA
LoadCursorA
GetSysColorBrush
LoadStringA
DestroyMenu
LoadBitmapA
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetNextDlgTabItem
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
EnableWindow
SetCursor
PostQuitMessage
GetSubMenu
GetMenuItemCount
GetMenuItemID
GetDlgItem
CreateWindowExA
SendMessageA
UnhookWindowsHookEx
SetWindowsHookExA
CallWindowProcA
GetCursorPos
GetWindow
SetWindowPos
SetFocus
GetFocus
SetForegroundWindow
PostMessageA
SetWindowLongA
IsWindowVisible
ShowWindow
SetWindowTextA
GetClassNameA
GetWindowTextA
IsIconic
GetWindowRect
GetClientRect
GetForegroundWindow
ClientToScreen
GetDC
ReleaseDC
GetMenuState
GetMenuCheckMarkDimensions
PeekMessageA
GetMessageA
TranslateMessage
DispatchMessageA
wsprintfA
MessageBoxA
GetParent
GetObjectA
CreateBitmap
GetStockObject
GetDeviceCaps
DeleteDC
SaveDC
RestoreDC
SelectObject
SetBkColor
SetTextColor
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
DeleteObject
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
OpenPrinterA
DocumentPropertiesA
ClosePrinter
ord17
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
RegCloseKey
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ