DllRegisterServer
Static task
static1
Behavioral task
behavioral1
Sample
5828fd07716140e5fefec1b07751378d9b76952e66b2c0fb0a860313d4030b4d.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
5828fd07716140e5fefec1b07751378d9b76952e66b2c0fb0a860313d4030b4d.dll
Resource
win10v2004-20240226-en
General
-
Target
5828fd07716140e5fefec1b07751378d9b76952e66b2c0fb0a860313d4030b4d
-
Size
966KB
-
MD5
7b024ea7c1110fd14c73fb0d7978ca5d
-
SHA1
c0a3711b3c40ef92c28cee9b67b5281b0420cf65
-
SHA256
5828fd07716140e5fefec1b07751378d9b76952e66b2c0fb0a860313d4030b4d
-
SHA512
278150173c88813a4a940c8b422d6ebcb6fb3456f00617eb83b743ede2172039fd2c11797aeadf9fc0dbc6794ee1854abe184ec65d00f7ac0a4f186f25d7a722
-
SSDEEP
12288:2ZdtKNN1CExMPiinuuqYxDiYrVSRvdgcWb5zJK0Pu7d/U3iEMT:2lCCrfiYcRvdgcWbFY0Pu59EMT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5828fd07716140e5fefec1b07751378d9b76952e66b2c0fb0a860313d4030b4d
Files
-
5828fd07716140e5fefec1b07751378d9b76952e66b2c0fb0a860313d4030b4d.dll regsvr32 windows:6 windows x86 arch:x86
67dc1522abf700e1c8a170cf027d44fd
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
lstrcmpW
DeleteFileW
FindClose
FindFirstFileW
FindNextFileW
GetFileAttributesW
RemoveDirectoryW
SetFileAttributesW
CloseHandle
Sleep
TerminateProcess
OpenProcess
lstrcmpiW
lstrcpyW
lstrcatW
lstrlenW
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
GetCurrentDirectoryA
GetCurrentDirectoryW
CreateDirectoryA
CreateDirectoryW
GetLastError
GetModuleFileNameA
lstrcpyA
lstrlenA
CreateFileA
CreateFileW
DeleteFileA
GetFileAttributesA
GetFileSize
ReadFile
GetProcAddress
WriteFile
Process32First
Process32Next
GetTickCount
GetDiskFreeSpaceExW
GetLogicalDriveStringsW
GetVolumeInformationW
DeviceIoControl
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetEvent
WaitForSingleObject
CreateEventA
CreateThread
TerminateThread
CopyFileW
CreateMutexW
GetTempPathW
OpenMutexW
GetModuleHandleW
ReadDirectoryChangesW
FlushFileBuffers
GetConsoleMode
GetConsoleOutputCP
SetStdHandle
GetStringTypeW
SetFilePointerEx
GetFileSizeEx
DecodePointer
EnumSystemLocalesW
GetUserDefaultLCID
GetModuleHandleA
GetModuleFileNameW
CreateProcessW
GetCurrentProcessId
ExitProcess
SetFilePointer
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetCurrentThreadId
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
IsProcessorFeaturePresent
IsDebuggerPresent
RaiseException
MultiByteToWideChar
WideCharToMultiByte
HeapAlloc
HeapFree
GetProcessHeap
VirtualQuery
FreeLibrary
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
GetStartupInfoW
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
SwitchToThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
RtlUnwind
LoadLibraryExW
InterlockedPushEntrySList
InterlockedFlushSList
EncodePointer
GetModuleHandleExW
HeapValidate
GetSystemInfo
GetCurrentThread
GetStdHandle
GetFileType
OutputDebugStringW
WriteConsoleW
SetConsoleCtrlHandler
HeapReAlloc
HeapSize
HeapQueryInformation
FindFirstFileExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetDateFormatW
GetTimeFormatW
ReadConsoleW
user32
RegisterClassW
CreateWindowExW
PostMessageA
DispatchMessageW
TranslateMessage
GetMessageW
wsprintfW
DefWindowProcA
advapi32
RegSetValueExW
RegDeleteValueW
RegCloseKey
GetUserNameW
RegOpenKeyExW
shell32
SHFileOperationW
shlwapi
PathIsDirectoryA
Exports
Exports
Sections
.text Size: 762KB - Virtual size: 762KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 164KB - Virtual size: 163KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.msvcjmc Size: 1024B - Virtual size: 905B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.00cfg Size: 512B - Virtual size: 260B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ