Static task
static1
General
-
Target
DopamineAlkad2546.dll
-
Size
2.9MB
-
MD5
668eb9c2bcc47c79f0d90e7566442051
-
SHA1
45d5ec40af132313ded11c9feac429c45593fbb8
-
SHA256
fdd54a6ac05a22c836154d0bee34b281ea593eb6a2b36fd6017b2d899776f7ba
-
SHA512
7f2f402b1868b70e2db463e394e1d9bdd66a4a165e790b54ebff9fe01f1085338b19f8c5a6b15f934620f2693cdfab42eacce16f2bf51873b80c0582b2814ec3
-
SSDEEP
49152:KYxdnVP9kocr6UVQxQlqvVei4o6YlryutjOCG2NMUXw27RNb0MAjls91+y3q7YaQ:KWkocr6UVQxQlqvVei4o6YlryutjOCGE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource DopamineAlkad2546.dll
Files
-
DopamineAlkad2546.dll.dll windows:6 windows x64 arch:x64
ce28f946289826d917d861590d252a9b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
kernel32
HeapReAlloc
RaiseException
WritePrivateProfileStringA
CreateThread
FindResourceExW
LoadResource
FindResourceW
HeapAlloc
VirtualProtectEx
HeapDestroy
Beep
GetProcAddress
DeleteCriticalSection
GetProcessHeap
WideCharToMultiByte
CreateDirectoryA
GetPrivateProfileStringA
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
LoadLibraryA
QueryPerformanceFrequency
QueryPerformanceCounter
VirtualFree
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapCreate
VirtualProtect
GetCurrentProcess
Thread32Next
Thread32First
GetCurrentThreadId
SuspendThread
ResumeThread
LockResource
Sleep
GetThreadContext
FlushInstructionCache
SetThreadContext
OpenThread
HeapSize
CreateFileMappingA
UnmapViewOfFile
MapViewOfFile
GetFileSizeEx
CreateFileA
LeaveCriticalSection
EnterCriticalSection
OutputDebugStringW
TerminateProcess
InitializeSListHead
GetSystemTimeAsFileTime
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
SleepConditionVariableSRW
WakeAllConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
GetModuleHandleA
InitializeCriticalSectionEx
HeapFree
SizeofResource
MultiByteToWideChar
GetCurrentProcessId
CloseHandle
GetLastError
ReadFile
CreateToolhelp32Snapshot
user32
SetCapture
GetForegroundWindow
SetCursor
GetClientRect
IsWindowUnicode
ReleaseCapture
SetCursorPos
OpenClipboard
TrackMouseEvent
CloseClipboard
EmptyClipboard
ClientToScreen
GetCapture
ScreenToClient
SetClipboardData
GetWindowThreadProcessId
GetKeyState
CallWindowProcW
SetWindowLongPtrW
GetAsyncKeyState
EnumWindows
GetCursorPos
GetClipboardData
LoadCursorW
d3dx11_43
D3DX11CreateShaderResourceViewFromMemory
msvcp140
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
_Mtx_destroy_in_situ
_Mtx_init_in_situ
_Xtime_get_ticks
?uncaught_exception@std@@YA_NXZ
?_Xinvalid_argument@std@@YAXPEBD@Z
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z
winmm
PlaySoundA
ntdll
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
ws2_32
recv
connect
socket
htons
send
inet_addr
closesocket
imm32
ImmGetContext
ImmSetCandidateWindow
ImmSetCompositionWindow
ImmReleaseContext
d3dcompiler_47
D3DCompile
vcruntime140
__C_specific_handler
strstr
__std_exception_copy
strrchr
_CxxThrowException
__intrinsic_setjmp
memcmp
memchr
memcpy
longjmp
__std_exception_destroy
memmove
__std_type_info_destroy_list
memset
vcruntime140_1
__CxxFrameHandler4
api-ms-win-crt-stdio-l1-1-0
fflush
fclose
fwrite
__stdio_common_vsscanf
_wfopen
__acrt_iob_func
fseek
ftell
__stdio_common_vsprintf
__stdio_common_vfprintf
__stdio_common_vsprintf_s
fread
api-ms-win-crt-runtime-l1-1-0
_errno
_invalid_parameter_noinfo_noreturn
_invalid_parameter_noinfo
_register_onexit_function
_initterm_e
_initterm
_cexit
_crt_atexit
_execute_onexit_table
_initialize_onexit_table
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
api-ms-win-crt-time-l1-1-0
_time64
strftime
_localtime64
api-ms-win-crt-heap-l1-1-0
free
malloc
_callnewh
api-ms-win-crt-string-l1-1-0
strncmp
strncpy
strcmp
api-ms-win-crt-utility-l1-1-0
rand
qsort
api-ms-win-crt-convert-l1-1-0
strtol
atoi
atof
api-ms-win-crt-math-l1-1-0
atan2f
atan2
cos
acosf
fmodf
Sections
.text Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1.5MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ