CreateCoordinateDllObj
Static task
static1
Behavioral task
behavioral1
Sample
2cf6b333d2f25d77d7cfb8655f2dbebb524c195108400df5a860a04312d35431.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
2cf6b333d2f25d77d7cfb8655f2dbebb524c195108400df5a860a04312d35431.dll
Resource
win10v2004-20230915-en
General
-
Target
2cf6b333d2f25d77d7cfb8655f2dbebb524c195108400df5a860a04312d35431
-
Size
492KB
-
MD5
c7613153bc1f95a08805d62ba47c18b1
-
SHA1
583bd93eab93ee9f947e4f9e5e7a9f60fc440620
-
SHA256
2cf6b333d2f25d77d7cfb8655f2dbebb524c195108400df5a860a04312d35431
-
SHA512
34f10045f3d44738c325e66157545360edec0962339dd9d7697e4354275284deb58a1dbab16f89c883ec3db8402cf4a650227c76da0f7e8da3fb559d8e19e492
-
SSDEEP
12288:kygMF62y7RpPaX6rLYirA6JH8KQeOngA/Xxed2HkdsRWR:kygS6nYi8nhxY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2cf6b333d2f25d77d7cfb8655f2dbebb524c195108400df5a860a04312d35431
Files
-
2cf6b333d2f25d77d7cfb8655f2dbebb524c195108400df5a860a04312d35431.dll windows:6 windows x64
b7d832f0956b19b8a004b78aa47b3e30
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
msvcp140
?_Xout_of_range@std@@YAXPEBD@Z
?_Xbad_alloc@std@@YAXXZ
?_Xlength_error@std@@YAXPEBD@Z
mfc140u
ord14288
ord7719
ord12212
ord14088
ord11665
ord11664
ord2011
ord7668
ord12625
ord3949
ord4011
ord9089
ord14216
ord7650
ord14210
ord12223
ord12222
ord2439
ord5183
ord8023
ord12544
ord8084
ord8167
ord2350
ord2346
ord1631
ord1499
ord1502
ord1667
ord1668
ord12442
ord6848
ord446
ord1089
ord7233
ord8901
ord11854
ord2697
ord13397
ord6000
ord3071
ord3307
ord3308
ord10163
ord11085
ord10704
ord8731
ord11813
ord4078
ord3056
ord8817
ord6251
ord1053
ord4181
ord3599
ord5240
ord13136
ord5245
ord8161
ord8449
ord2689
ord14194
ord3748
ord2907
ord8440
ord4083
ord3096
ord6342
ord1157
ord6775
ord5641
ord4084
ord8823
ord5771
ord6343
ord1158
ord7775
ord7780
ord13309
ord4098
ord3273
ord3167
ord8829
ord5904
ord6596
ord1432
ord4077
ord6248
ord8087
ord13871
ord7783
ord4324
ord5672
ord488
ord1120
ord6707
ord8452
ord3266
ord3144
ord6555
ord1383
ord489
ord1121
ord3952
ord6090
ord4725
ord14031
ord14032
ord13688
ord13008
ord5007
ord290
ord4947
ord2903
ord6634
ord13568
ord2212
ord12600
ord12932
ord13597
ord2344
ord14027
ord1670
ord8468
ord8471
ord3078
ord13767
ord6724
ord1504
ord1111
ord6303
ord1083
ord6280
ord3069
ord7551
ord1057
ord6258
ord8819
ord3058
ord4081
ord8439
ord6121
ord3746
ord13199
ord1122
ord491
ord1428
ord962
ord4913
ord6566
ord265
ord8063
ord8501
ord1086
ord2187
ord12761
ord6250
ord1424
ord6588
ord5916
ord8826
ord3164
ord4095
ord8058
ord12563
ord4510
ord5709
ord285
ord2921
ord12240
ord4946
ord3742
ord8043
ord12967
ord12746
ord2473
ord6247
ord438
ord1369
ord878
ord280
ord1501
ord1503
ord2843
ord6002
ord13401
ord3212
ord3209
ord7913
ord2698
ord14360
ord9976
ord9978
ord9977
ord9975
ord9979
ord5451
ord11414
ord11415
ord8830
ord11771
ord3718
ord11625
ord14209
ord8656
ord11902
ord6729
ord10691
ord8947
ord3173
ord13513
ord11944
ord11940
ord1700
ord1722
ord1748
ord1734
ord1755
ord4776
ord4843
ord4788
ord4806
ord4800
ord4794
ord4853
ord4837
ord4782
ord4859
ord4814
ord4752
ord4767
ord4828
ord4360
ord9384
ord4352
ord2967
ord14211
ord7651
ord14217
ord11406
ord13354
ord5723
ord2629
ord11806
ord3812
ord3279
ord3278
ord11850
ord5080
ord5363
ord5552
ord9041
ord5339
ord5582
ord5083
ord5229
ord5062
ord7460
ord7461
ord7450
ord5227
ord7922
ord9946
ord1491
ord286
ord1033
ord8900
ord6619
ord6631
ord11081
ord4721
ord11322
ord4335
ord4726
ord2475
ord6320
ord3756
ord296
ord4656
ord2270
ord6313
ord14290
ord6123
ord14289
ord6122
ord3731
ord5706
ord11921
ord11929
ord4445
ord7920
ord10124
ord11933
ord11901
ord1489
ord12606
ord1452
ord5555
ord985
ord8507
ord9941
ord6614
ord7716
ord1450
ord13864
ord3713
ord983
ord7393
ord2193
ord3951
ord1039
ord323
ord2909
ord2424
ord266
ord2316
ord3172
ord2906
ord7394
ord3728
ord1492
ord324
ord1040
ord2327
ord2369
ord2372
ord2338
ord2371
ord473
ord2234
ord2336
ord2161
ord2266
ord2360
ord1454
ord990
ord8822
kernel32
CreateMutexW
WaitForSingleObject
ReleaseMutex
MultiByteToWideChar
InitializeCriticalSectionAndSpinCount
GetLastError
WideCharToMultiByte
GetSystemTime
CloseHandle
CreateThread
Sleep
CopyFileW
DeleteFileW
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
FindClose
FindNextFileW
FindFirstFileW
GetUserDefaultLCID
GetProcAddress
LoadLibraryA
GetModuleFileNameA
FreeLibrary
LoadLibraryW
GetWindowsDirectoryW
OutputDebugStringW
GetModuleFileNameW
lstrcatW
lstrcpyW
lstrlenW
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
DeleteCriticalSection
LocalAlloc
LocalFree
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetCurrentProcessId
CreateEventW
GetModuleHandleW
IsDebuggerPresent
QueryPerformanceCounter
user32
SystemParametersInfoW
UpdateWindow
InvalidateRect
IsWindow
GetClientRect
LoadCursorW
GetSystemMetrics
SendMessageW
IsRectEmpty
BeginPaint
EndPaint
EnableWindow
GetSysColor
GetSysColorBrush
DrawEdge
InflateRect
SetRect
SetRectEmpty
LoadBitmapW
CopyRect
IsChild
DestroyCursor
ScreenToClient
SetCursor
SetCapture
ReleaseCapture
GetKeyState
KillTimer
SetTimer
GetDlgCtrlID
GetFocus
WindowFromPoint
SetParent
SetWindowTextW
GetDlgItem
LoadIconW
GetSystemMenu
AppendMenuW
MessageBoxW
PtInRect
OffsetRect
GetCursorPos
GetMenu
FillRect
gdi32
PatBlt
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
CreateSolidBrush
SetBkColor
ExtTextOutW
DeleteObject
CreateRectRgn
SelectClipRgn
SelectObject
Rectangle
GetObjectW
CreatePolygonRgn
FillRgn
CreatePen
MoveToEx
LineTo
SetBrushOrgEx
CreateBitmap
CreatePatternBrush
CreateFontIndirectW
GetStockObject
GetTextExtentPoint32W
EnumFontFamiliesW
shell32
ShellExecuteW
ole32
CoTaskMemFree
CoTaskMemAlloc
vcruntime140
memmove
memchr
memset
__C_specific_handler
__CxxFrameHandler3
__vcrt_InitializeCriticalSectionEx
__std_type_info_destroy_list
memcpy
_CxxThrowException
__std_terminate
api-ms-win-crt-convert-l1-1-0
atoi
wcstod
wcstol
atof
api-ms-win-crt-stdio-l1-1-0
ftell
fread
fclose
fwrite
__stdio_common_vswprintf
__stdio_common_vsprintf
fopen
fseek
_wfopen
fgets
feof
fflush
api-ms-win-crt-runtime-l1-1-0
_initialize_onexit_table
_seh_filter_dll
_initterm_e
_initterm
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_invalid_parameter_noinfo_noreturn
_initialize_narrow_environment
_configure_narrow_argv
api-ms-win-crt-time-l1-1-0
_mktime64
api-ms-win-crt-heap-l1-1-0
free
api-ms-win-crt-math-l1-1-0
fmod
floor
Exports
Exports
Sections
.text Size: 221KB - Virtual size: 221KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 98KB - Virtual size: 97KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.gfids Size: 512B - Virtual size: 52B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 153KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ