X:\wEdurksdvetiJ\kqgmGFPPuNbe\yymcoDbl.pdb
Static task
static1
Behavioral task
behavioral1
Sample
bbf7e57a4f5ee6f34e077bf6e0f5def3.dll
Resource
win7-20240221-en
General
-
Target
bbf7e57a4f5ee6f34e077bf6e0f5def3
-
Size
752KB
-
MD5
bbf7e57a4f5ee6f34e077bf6e0f5def3
-
SHA1
2b5ca5ea319959a286b05b3eef783a2ec2cba23a
-
SHA256
6dd806b9bac30b7958b2317e80fc7909947c29ed91c84a7408bd67e487075074
-
SHA512
d7fa295d55df947d8e46775f744b5b25e3a4e84fdadedca58a09322ee2255e045fb672387f84623659b3e2524f659cf20ec6733ef20d37e95448a21df83cc157
-
SSDEEP
12288:ATxj9RXZQ+ce+cG5YCQk6w5bo9ED0zm0xi+np8hZxW5QM6wGZjhZ3/xE:AVZRXG+zD2Qj/q0xi+p80Dajv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bbf7e57a4f5ee6f34e077bf6e0f5def3
Files
-
bbf7e57a4f5ee6f34e077bf6e0f5def3.dll windows:5 windows x86 arch:x86
b915ab34d2100325bf641ec77adf716f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
shlwapi
StrToIntW
msvcrt
toupper
clearerr
_controlfp
wcscmp
system
__set_app_type
wcstok
isspace
wcsncmp
fflush
srand
strtok
isalpha
iswctype
swprintf
__p__fmode
__p__commode
fread
setvbuf
memset
setlocale
wcscpy
_amsg_exit
qsort
strtol
_initterm
realloc
fclose
wcscat
strncmp
_ismbblead
strspn
gets
bsearch
mktime
strtoul
wcsstr
vsprintf
isupper
_XcptFilter
rand
_exit
wcstombs
wcstol
putc
_cexit
__setusermatherr
__getmainargs
user32
DrawTextA
LoadAcceleratorsW
IsCharAlphaNumericW
CharToOemA
ClientToScreen
FindWindowA
GetActiveWindow
GetDlgCtrlID
SetMenu
InvertRect
SetRect
CreateWindowExA
SetScrollRange
ShowCaret
CloseDesktop
GetGUIThreadInfo
GetMenuItemID
CopyAcceleratorTableW
RegisterClassExA
MessageBoxExA
AdjustWindowRectEx
LoadStringA
SetWindowPlacement
EnumThreadWindows
DestroyIcon
GetWindowRect
DragObject
GetForegroundWindow
SetWindowTextA
GetDlgItemTextW
SetWindowTextW
MapVirtualKeyExW
CharPrevA
ChildWindowFromPointEx
SetCursorPos
GetMessageW
MapVirtualKeyA
WindowFromPoint
GetUserObjectInformationW
AllowSetForegroundWindow
FrameRect
GetWindowModuleFileNameW
CopyRect
DrawFocusRect
GetWindowPlacement
LoadStringW
CheckMenuItem
SendNotifyMessageW
SetPropW
DefWindowProcA
DestroyCaret
DialogBoxIndirectParamW
InflateRect
EnableScrollBar
SendMessageTimeoutA
KillTimer
CharPrevW
CharUpperBuffA
GetMenuItemCount
mouse_event
GetCaretBlinkTime
PostThreadMessageW
DestroyWindow
SetMenuItemInfoW
EqualRect
DrawAnimatedRects
ModifyMenuW
GetDlgItem
GetWindowTextA
TileWindows
GetMenuState
CreateIconIndirect
ChangeMenuW
IsWindow
InSendMessage
InsertMenuA
CharNextA
IsWindowVisible
SetDlgItemTextW
ShowWindow
AdjustWindowRect
SendMessageW
LoadCursorW
SetParent
SetRectEmpty
ValidateRect
SystemParametersInfoW
GetParent
DefFrameProcA
GetMonitorInfoW
EndDialog
AppendMenuA
GetSubMenu
RegisterWindowMessageA
DispatchMessageA
GetClassInfoW
GetFocus
IsChild
GetMessagePos
SetForegroundWindow
GetScrollRange
SetClassLongW
CheckDlgButton
GetMenuCheckMarkDimensions
GetWindowLongA
LoadMenuA
wvsprintfA
SetWindowLongA
CreateCaret
CreateAcceleratorTableW
CheckMenuRadioItem
SendDlgItemMessageA
MapDialogRect
DialogBoxParamA
GetDlgItemInt
wvsprintfW
GetDlgItemTextA
DrawTextW
SetWindowLongW
CallWindowProcW
CreateDialogIndirectParamW
GetClassLongW
LockWindowUpdate
IsCharUpperA
VkKeyScanW
MapVirtualKeyW
MonitorFromPoint
kernel32
HeapSize
lstrcatA
MulDiv
HeapFree
GetAtomNameA
GetThreadPriority
WaitCommEvent
GetModuleFileNameW
IsValidLocale
EnumResourceTypesA
MoveFileExW
GlobalFree
GlobalGetAtomNameW
CompareFileTime
GlobalAddAtomW
SetFilePointer
WinExec
FindResourceW
TlsSetValue
HeapValidate
CreateMailslotW
IsValidLanguageGroup
CreateSemaphoreA
SetWaitableTimer
DeleteFileW
GetModuleHandleA
GlobalFindAtomW
AreFileApisANSI
GlobalAddAtomA
OpenEventA
InitializeCriticalSection
CreateFileA
RegisterWaitForSingleObject
SetLastError
GetDateFormatW
HeapUnlock
SetMailslotInfo
ClearCommError
RemoveDirectoryA
IsDBCSLeadByte
GetCommTimeouts
GetModuleHandleW
VirtualQuery
CreateEventA
DeviceIoControl
GlobalUnlock
GetTimeZoneInformation
GetProcessHeap
CancelIo
GetVersionExW
HeapReAlloc
LCMapStringW
HeapAlloc
LoadLibraryW
GetThreadLocale
GetCurrentThreadId
GetTempPathA
FindNextFileW
CreateFileMappingW
Exports
Exports
showtit[D
?GenericOutputInfoYSUh@@YGK_KHE[D
Sections
.text Size: 231KB - Virtual size: 231KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 503KB - Virtual size: 503KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ