Static task
static1
Behavioral task
behavioral1
Sample
095b679b66d964234ff0e178c977da75aab734ddb500302b74b848b69b7c413e.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
095b679b66d964234ff0e178c977da75aab734ddb500302b74b848b69b7c413e.dll
Resource
win10v2004-20231215-en
General
-
Target
095b679b66d964234ff0e178c977da75aab734ddb500302b74b848b69b7c413e
-
Size
2.3MB
-
MD5
2af2b73063bb4c1e928465c83b4920e5
-
SHA1
9e47503bcc2a4c39930f61b6495fe71b5b3138cf
-
SHA256
095b679b66d964234ff0e178c977da75aab734ddb500302b74b848b69b7c413e
-
SHA512
eb76db7078e5ab7f1e06acf11d879d59e897f95c6afc5e39b794714dd712811b8d64d6b227e31baa39a23d055b32f010e9a6fd36d0afc106f8f022d40b298225
-
SSDEEP
49152:uydbAkC7WhP4iX3SnBfYDxl6IVVjYu7yT7cBnUn6kIZcDDT7okb2DWGoQ:u+2Wp4Q3kB8xl6IzjY77cBnUn6kI6DyH
Malware Config
Signatures
Files
-
095b679b66d964234ff0e178c977da75aab734ddb500302b74b848b69b7c413e.dll windows:6 windows x86 arch:x86
f4ed77753d0cb87a4efaaf2b4f4ab4e1
Code Sign
23:a0:8f:03:5a:44:d8:d9:88:ff:5b:df:62:fc:c9:fb:3f:73:72:ecCertificate
IssuerCN=北京志翔科技股份有限公司,OU=北京志翔科技股份有限公司,O=北京志翔科技股份有限公司,L=北京,ST=北京,C=CNNot Before19/09/2022, 08:50Not After18/06/2032, 08:50SubjectCN=北京志翔科技股份有限公司,OU=北京志翔科技股份有限公司,O=北京志翔科技股份有限公司,L=北京,ST=北京,C=CN0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate
IssuerCN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before01/08/2022, 00:00Not After09/11/2031, 23:59SubjectCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before23/03/2022, 00:00Not After22/03/2037, 23:59SubjectCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5aCertificate
IssuerCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USNot Before21/09/2022, 00:00Not After21/11/2033, 23:59SubjectCN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
1a:f3:b6:c3:4a:18:d1:13:61:c0:33:0c:64:4d:39:b4:c9:c2:0d:6eSigner
Actual PE Digest1a:f3:b6:c3:4a:18:d1:13:61:c0:33:0c:64:4d:39:b4:c9:c2:0d:6eDigest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetModuleFileNameA
GetEnvironmentStringsW
FreeEnvironmentStringsW
WriteConsoleW
SetCurrentDirectoryW
SetEnvironmentVariableA
PeekNamedPipe
GetFileInformationByHandle
UnregisterWaitEx
QueryDepthSList
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
ReleaseSemaphore
VirtualFree
FreeLibraryAndExitThread
GetThreadTimes
EnumSystemLocalesW
FindFirstFileExW
SetEnvironmentVariableW
UnregisterWait
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
GetThreadPriority
SwitchToThread
SignalObjectAndWait
WaitForSingleObjectEx
CreateTimerQueue
SetVolumeLabelW
lstrlenA
ReadConsoleW
GetStdHandle
GetConsoleMode
GetConsoleCP
IsValidLocale
LCMapStringW
GetTimeFormatW
GetDateFormatW
GetTimeZoneInformation
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCPInfo
GetOEMCP
RegisterWaitForSingleObject
GetStringTypeW
GetACP
IsValidCodePage
VirtualAlloc
HeapQueryInformation
GetFileType
SetStdHandle
RtlUnwind
GetCommandLineA
ExitThread
AreFileApisANSI
GetModuleHandleExW
ExitProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetSystemTimeAsFileTime
MoveFileExW
FindResourceExW
GetUserDefaultLCID
GetDiskFreeSpaceW
VirtualProtect
SearchPathW
GetProfileIntW
GetTempPathW
GetTempFileNameW
VerifyVersionInfoW
VerSetConditionMask
lstrcpyW
GetCurrentDirectoryW
GlobalFlags
GetUserDefaultUILanguage
GetLocaleInfoW
CompareStringW
GetCurrentThread
MoveFileW
lstrcmpiW
DuplicateHandle
UnlockFile
SetFilePointer
LockFile
GetVolumeInformationW
GetFullPathNameW
SetFileTime
LocalFileTimeToFileTime
GetFileTime
GlobalGetAtomNameW
lstrcmpA
ResumeThread
SetThreadPriority
SetErrorMode
LocalReAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
GetVersionExW
FindNextFileW
FindFirstFileW
FindClose
GlobalFindAtomW
GlobalAddAtomW
lstrcmpW
GlobalDeleteAtom
GetModuleHandleA
FreeResource
GetSystemDirectoryW
EncodePointer
LoadLibraryExW
SetLastError
CopyFileW
MulDiv
GlobalUnlock
GlobalLock
GlobalSize
SystemTimeToFileTime
GetLocalTime
DecodePointer
HeapSize
RaiseException
InitializeCriticalSectionEx
HeapReAlloc
QueryPerformanceFrequency
QueryPerformanceCounter
GetDiskFreeSpaceExW
DeviceIoControl
GetDriveTypeW
GetLogicalDriveStringsW
GlobalMemoryStatus
GlobalMemoryStatusEx
LoadLibraryA
GetSystemDirectoryA
GetSystemInfo
GetPrivateProfileStringW
CreateDirectoryW
GetFileAttributesW
VirtualQuery
LocalAlloc
UnmapViewOfFile
OpenFileMappingW
MapViewOfFile
CreateFileMappingW
GetTickCount64
OpenEventW
GetCurrentThreadId
GetCurrentProcess
CreateProcessW
CreateSemaphoreW
GetStartupInfoW
TerminateProcess
OpenProcess
HeapFree
GetProcessHeap
HeapAlloc
CreateThread
GetModuleFileNameW
LocalFree
FormatMessageW
GlobalFree
GlobalAlloc
GetTickCount
GetWindowsDirectoryW
SetEvent
OutputDebugStringA
CreateEventW
GetCurrentProcessId
GetExitCodeProcess
WaitForSingleObject
GetProcessId
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileSize
FlushFileBuffers
SetFileAttributesW
GetFileAttributesExW
FreeLibrary
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
OutputDebugStringW
MultiByteToWideChar
WideCharToMultiByte
GetProcAddress
GetLastError
LoadLibraryW
GetModuleHandleW
ReadFile
FindResourceW
LoadResource
LockResource
SizeofResource
Sleep
WriteFile
GetFileSizeEx
SetEndOfFile
SetFilePointerEx
CreateFileW
DeleteFileW
CloseHandle
SystemTimeToTzSpecificLocalTime
user32
SetCapture
GetNextDlgGroupItem
IsIconic
InvalidateRect
KillTimer
SetTimer
DeleteMenu
SetCursor
ShowOwnedPopups
DestroyIcon
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamW
IntersectRect
RealChildWindowFromPoint
PostQuitMessage
SendDlgItemMessageA
CopyImage
InflateRect
GetMenuItemInfoW
DestroyMenu
LoadBitmapW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
CharUpperW
LoadCursorW
GetSysColorBrush
GetActiveWindow
TranslateMessage
GetMessageW
WindowFromPoint
GetCursorPos
FillRect
ClientToScreen
EndPaint
BeginPaint
ReleaseDC
GetWindowDC
GetDC
TabbedTextOutW
GrayStringW
DrawTextExW
DrawTextW
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
LoadIconW
CallNextHookEx
ReleaseCapture
UnionRect
IsMenu
UpdateLayeredWindow
MonitorFromPoint
BringWindowToTop
OemToCharBuffA
CharToOemBuffA
SendMessageW
SetWindowsHookExW
GetLastActivePopup
GetTopWindow
GetClassLongW
PtInRect
EqualRect
CopyRect
GetSysColor
MapWindowPoints
ScreenToClient
AdjustWindowRectEx
RemovePropW
GetPropW
SetPropW
ShowScrollBar
LoadAcceleratorsW
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
RedrawWindow
ValidateRect
SetForegroundWindow
SetActiveWindow
UpdateWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
GetKeyState
IsWindowVisible
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
DestroyWindow
IsChild
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
DefWindowProcW
PostMessageW
GetMessageTime
DrawFocusRect
SetRectEmpty
OffsetRect
IsRectEmpty
LoadImageW
DrawIconEx
GetIconInfo
MessageBeep
GetAsyncKeyState
EnableScrollBar
HideCaret
InvertRect
NotifyWinEvent
CreatePopupMenu
GetMenuDefaultItem
MapVirtualKeyW
LoadMenuW
SetLayeredWindowAttributes
EnumDisplayMonitors
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
DrawStateW
DrawEdge
DrawFrameControl
UnhookWindowsHookEx
SetWindowRgn
GetWindowThreadProcessId
GetParent
GetWindow
SystemParametersInfoW
GetWindowRect
GetClientRect
GetDesktopWindow
GetClassNameW
GetWindowTextW
SetWindowPos
MessageBoxW
GetForegroundWindow
GetSystemMetrics
wsprintfA
UnregisterClassW
GetMenuStringW
GetMenuState
GetSubMenu
GetMenuItemID
GetMenuItemCount
InsertMenuW
AppendMenuW
RemoveMenu
IsWindow
ShowWindow
MoveWindow
GetDlgItem
CheckDlgButton
GetDlgCtrlID
SetFocus
GetFocus
EnableWindow
TranslateAcceleratorW
InsertMenuItemW
UnpackDDElParam
ReuseDDElParam
GetKeyNameTextW
TrackMouseEvent
GetComboBoxInfo
IsZoomed
IsWindowEnabled
SetWindowTextW
GetWindowTextLengthW
GetWindowLongW
SetWindowLongW
IsDialogMessageW
RegisterWindowMessageW
DispatchMessageW
PeekMessageW
GetMessagePos
GetSystemMenu
PostThreadMessageW
WaitMessage
GetKeyboardLayout
IsCharLowerW
MapVirtualKeyExW
ToUnicodeEx
GetKeyboardState
CreateAcceleratorTableW
DestroyAcceleratorTable
CopyAcceleratorTableW
SetCursorPos
SetRect
SetParent
LockWindowUpdate
SetClassLongW
GetDoubleClickTime
CopyIcon
SetMenuDefaultItem
ModifyMenuW
RegisterClipboardFormatW
CharUpperBuffW
FrameRect
DrawMenuBar
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
IsClipboardFormatAvailable
GetUpdateRect
SubtractRect
CreateMenu
MapDialogRect
DestroyCursor
GetWindowRgn
DrawIcon
GetScrollRange
gdi32
MoveToEx
TextOutW
ExtTextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
GetTextExtentPoint32W
CombineRgn
CreateRectRgnIndirect
PatBlt
SetRectRgn
DPtoLP
GetTextMetricsW
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
GetBkColor
CreateCompatibleBitmap
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
SetPixel
StretchBlt
CreateDIBSection
CreateEllipticRgn
Ellipse
GetTextColor
CreatePolygonRgn
Polygon
Polyline
Rectangle
EnumFontFamiliesExW
GetRgnBox
OffsetRgn
CreateRoundRectRgn
RoundRect
FrameRgn
PtInRegion
SetPixelV
ExtFloodFill
SetPaletteEntries
FillRgn
GetBoundsRect
GetWindowOrgEx
LPtoDP
GetViewportOrgEx
GetTextFaceW
SetTextAlign
SetROP2
SetPolyFillMode
SetLayout
SetMapMode
SetBkMode
SelectPalette
SelectObject
ExtSelectClipRgn
SelectClipRgn
SaveDC
RestoreDC
RectVisible
PtVisible
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetStockObject
GetPixel
GetObjectType
GetClipBox
ExcludeClipRect
Escape
DeleteObject
CreateSolidBrush
CreateRectRgn
CreatePatternBrush
CreateHatchBrush
CreateBitmap
BitBlt
SetTextColor
SetBkColor
GetDeviceCaps
CreateDCW
CopyMetaFileW
DeleteDC
CreatePen
CreateCompatibleDC
GetObjectW
SetDIBColorTable
GetLayout
CreateFontIndirectW
msimg32
AlphaBlend
TransparentBlt
winspool.drv
ClosePrinter
OpenPrinterW
DocumentPropertiesW
advapi32
OpenProcessToken
RegQueryValueExW
RegCloseKey
RegCreateKeyExW
RegSetValueExW
RegDeleteKeyW
LookupAccountSidA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
LookupAccountSidW
GetTokenInformation
DuplicateTokenEx
RegOpenKeyExW
CreateProcessAsUserW
StartServiceW
QueryServiceStatusEx
RegDeleteValueW
SetServiceStatus
QueryServiceStatus
ControlService
OpenServiceW
CloseServiceHandle
OpenSCManagerW
RegEnumKeyExW
shell32
DragQueryFileW
SHGetFolderPathW
SHBrowseForFolderW
SHGetPathFromIDListW
ShellExecuteA
SHGetFolderPathA
SHGetFileInfoW
SHAppBarMessage
DragFinish
ShellExecuteExW
SHGetDesktopFolder
SHGetSpecialFolderLocation
ShellExecuteW
shlwapi
PathFindExtensionW
PathFindFileNameW
PathRemoveFileSpecW
PathIsUNCW
PathStripToRootW
StrFormatKBSizeW
uxtheme
GetThemeSysColor
GetWindowTheme
GetThemePartSize
IsThemeBackgroundPartiallyTransparent
IsAppThemed
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemeColor
DrawThemeText
GetCurrentThemeName
DrawThemeParentBackground
ole32
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
IsAccelerator
OleCreateMenuDescriptor
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleLockRunning
DoDragDrop
CreateStreamOnHGlobal
CoDisconnectObject
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
CoSetProxyBlanket
CoInitializeSecurity
CoInitializeEx
CoCreateInstance
CoUninitialize
CoInitialize
oleaut32
SystemTimeToVariantTime
VariantTimeToSystemTime
VariantCopy
VarBstrFromDate
SysAllocString
SysFreeString
SysAllocStringLen
VariantInit
SysStringLen
VariantClear
LoadTypeLi
VariantChangeType
gdiplus
GdipBitmapUnlockBits
GdipAlloc
GdipFree
GdiplusStartup
GdipCloneImage
GdipDisposeImage
GdipGetImageGraphicsContext
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePalette
GdipGetImagePaletteSize
GdipCreateBitmapFromStream
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipDeleteGraphics
GdiplusShutdown
GdipBitmapLockBits
GdipCreateBitmapFromScan0
iphlpapi
GetAdaptersAddresses
crypt32
CryptStringToBinaryA
ws2_32
WSAWaitForMultipleEvents
sendto
WSAEventSelect
WSASocketW
WSACreateEvent
WSAAddressToStringA
recvfrom
WSAStartup
inet_ntoa
socket
WSAGetLastError
ioctlsocket
closesocket
htons
inet_addr
connect
select
WSACleanup
getaddrinfo
freeaddrinfo
getsockopt
WSAEnumNetworkEvents
wtsapi32
WTSFreeMemory
WTSEnumerateSessionsExW
WTSFreeMemoryExW
WTSEnumerateProcessesW
WTSEnumerateProcessesA
userenv
DestroyEnvironmentBlock
CreateEnvironmentBlock
pdh
PdhCloseQuery
PdhGetRawCounterValue
PdhCollectQueryData
PdhAddEnglishCounterW
PdhOpenQueryW
PdhCalculateCounterFromRawValue
PdhGetFormattedCounterValue
PdhAddCounterW
oleacc
LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject
imm32
ImmGetContext
ImmReleaseContext
ImmGetOpenStatus
winmm
PlaySoundW
Exports
Exports
CreateFaultDetector
ReleaseFaultDetector
Sections
.text Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 426KB - Virtual size: 426KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 33KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 138KB - Virtual size: 137KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ