Control_RunDLL
entryPoint
Behavioral task
behavioral1
Sample
4e6ac23cf16f054b9b79ccbe0e486f82.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4e6ac23cf16f054b9b79ccbe0e486f82.dll
Resource
win10v2004-20231222-en
Target
4e6ac23cf16f054b9b79ccbe0e486f82.exe
Size
299KB
MD5
4e6ac23cf16f054b9b79ccbe0e486f82
SHA1
0c4572af283c893d87c6040b795150ab55ec0577
SHA256
dae8b56e57d10b540c1664c824fe0dfb6316a8dee0722d1d57b7961147cd857c
SHA512
73327aaa38b9949219f2d19358f8a8b217d0022483af19acaf75ee3c702205bfbb58915462c7f8760bd27a5ea972b8e7118b572d37c954a2ebb53c672c171817
SSDEEP
6144:rTW3YgVzMS73tzrVmSavGXQ+90sGjGms4+/NoNZra8dOJCUJUeANlq:rTW3YmzMc3tzrVmLvGA5sGimst/NQ/U7
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
CloseDesktop
CreateDesktopA
SysAllocString
SysFreeString
VariantInit
VariantClear
VariantChangeType
AdjustTokenPrivileges
OpenProcessToken
LookupPrivilegeValueA
freeaddrinfo
getaddrinfo
WSAGetLastError
htonl
UuidCreate
FlushFileBuffers
WriteConsoleW
GetConsoleMode
GetConsoleCP
WriteFile
SetStdHandle
SetFilePointerEx
CreateEventW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCPInfo
GetCommandLineW
GetLocalTime
GetTickCount
LocalAlloc
LocalFree
FormatMessageA
WideCharToMultiByte
Sleep
GetTickCount64
lstrcmpA
FileTimeToSystemTime
SystemTimeToFileTime
GetLastError
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
VirtualAlloc
VirtualFree
CreateFileA
GetFileSize
SetEndOfFile
SetFilePointer
CloseHandle
GetCurrentProcess
CreateRemoteThread
VirtualAllocEx
WriteProcessMemory
GetModuleFileNameA
WTSGetActiveConsoleSessionId
MultiByteToWideChar
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateFileW
GetModuleHandleW
GetProcAddress
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlPcToFileHeader
EncodePointer
RaiseException
RtlUnwindEx
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
InterlockedFlushSList
SetLastError
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
ExitProcess
GetACP
GetStdHandle
GetFileType
GetStringTypeW
LCMapStringW
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
Control_RunDLL
entryPoint
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ