van.pdb
Static task
static1
Behavioral task
behavioral1
Sample
VAN.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
VAN.dll
Resource
win10v2004-20240426-en
General
-
Target
VAN.dll
-
Size
624KB
-
MD5
370349f79315d4db86cd992cacefee61
-
SHA1
d6a2cf9933894513d6db986d2268fc4206f48c05
-
SHA256
436d5622ae0d820d4fab7e6dd7ffc38f9752ae4822505989d77db1cfaa4bf416
-
SHA512
7808cc155706773a6ea9dba70dbb0aea29c66415c64359e6544ba46c0d436181434bfdc879bd2245c501d03d71062b74b855dbd16f492d4f89deb70960ac8c0f
-
SSDEEP
12288:gCdFGDrSJSkORCWZ0/QtWb+ye2ozkzPy:gCdQDrSTOxGIsb+ybo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource VAN.dll
Files
-
VAN.dll.dll regsvr32 windows:6 windows x86 arch:x86
de8e3057ea55767354a0fb45ada798cc
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
msvcrt
??0exception@@QAE@ABQBD@Z
free
memcpy_s
_CxxThrowException
_onexit
_lock
__dllonexit
_unlock
_errno
realloc
?terminate@@YAXXZ
_except_handler4_common
??1type_info@@UAE@XZ
_amsg_exit
_initterm
_XcptFilter
_callnewh
iswprint
wcscat_s
wcscpy_s
??0exception@@QAE@XZ
_wcsicmp
??0exception@@QAE@ABV0@@Z
??1exception@@UAE@XZ
?what@exception@@UBEPBDXZ
malloc
towlower
memcpy
_vsnwprintf
wcsncpy_s
__CxxFrameHandler3
_wtol
iswspace
wcsstr
memmove_s
memset
_purecall
ntdll
WinSqmIsOptedIn
NtOpenFile
RtlNtStatusToDosError
WinSqmIncrementDWORD
WinSqmAddToAverageDWORD
advapi32
EventUnregister
EventRegister
UnregisterTraceGuids
RegisterTraceGuidsW
GetTraceLoggerHandle
GetTraceEnableLevel
GetTraceEnableFlags
RegQueryValueExW
EventWrite
TraceMessage
RegEnumKeyExW
RegQueryInfoKeyW
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegDeleteValueW
RegNotifyChangeKeyValue
kernel32
InterlockedCompareExchange
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
CreateFileW
GetSystemTimeAsFileTime
lstrlenW
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
Sleep
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
OutputDebugStringA
GetVersionExA
CreateEventW
ResetEvent
DeviceIoControl
SetLastError
GetThreadLocale
SetThreadLocale
TlsAlloc
DisableThreadLibraryCalls
TlsFree
SetEvent
CreateActCtxW
ActivateActCtx
DeactivateActCtx
ReleaseActCtx
GetTickCount64
FormatMessageW
ExpandEnvironmentStringsW
InterlockedExchange
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
InitializeSRWLock
HeapFree
GetProcessHeap
HeapAlloc
TlsSetValue
LocalAlloc
CreateThread
LocalFree
TlsGetValue
WaitForSingleObject
CloseHandle
GetModuleFileNameW
LoadLibraryExW
FindResourceW
LoadResource
SizeofResource
MultiByteToWideChar
FreeLibrary
InterlockedDecrement
InterlockedIncrement
GetCurrentThreadId
lstrcmpiW
GetModuleHandleW
GetProcAddress
LoadLibraryW
GetLastError
DeleteCriticalSection
ole32
CoCreateInstance
CoSetProxyBlanket
StringFromGUID2
CoInitializeEx
CoUninitialize
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
IIDFromString
user32
GetParent
UnregisterClassA
NotifyWinEvent
GetMessageW
TranslateMessage
DispatchMessageW
PostQuitMessage
GetCursorPos
PtInRect
AdjustWindowRectEx
InflateRect
GetDesktopWindow
GetKeyState
SetActiveWindow
SetFocus
GetSystemMetrics
SetTimer
GetClientRect
SetWindowRgn
UnregisterClassW
LoadCursorW
GetWindowDC
SystemParametersInfoW
ReleaseDC
FindWindowExW
SetPropW
EnumWindows
IntersectRect
GetPropW
LoadImageW
GetWindowThreadProcessId
AttachThreadInput
IsRectEmpty
EnumDisplayMonitors
GetClassNameW
GetWindow
GetDoubleClickTime
TrackPopupMenu
DestroyMenu
CreatePopupMenu
AppendMenuW
AllowSetForegroundWindow
IsWindowVisible
DestroyIcon
LoadStringW
RegisterWindowMessageW
IsWindow
PostMessageW
DefWindowProcW
RegisterClassW
CreateWindowExW
DestroyWindow
FindWindowW
GetWindowLongW
SetWindowLongW
ShowWindow
SetForegroundWindow
KillTimer
GetWindowRect
CalculatePopupWindowPosition
GetDC
SetWindowPos
CharNextW
CreateIconIndirect
GetActiveWindow
oleaut32
SysFreeString
VarUI4FromStr
VariantClear
VariantInit
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SysAllocStringLen
SysAllocString
SysStringLen
shell32
DuplicateIcon
ShellExecuteW
Shell_NotifyIconGetRect
ShellExecuteExW
uxtheme
IsThemeActive
OpenThemeData
CloseThemeData
GetThemeBackgroundRegion
gdi32
CreateCompatibleBitmap
CreateBitmapIndirect
GetDeviceCaps
DeleteObject
SetDIBits
dwmapi
DwmGetWindowAttribute
DwmIsCompositionEnabled
DwmSetWindowAttribute
iphlpapi
ConvertInterfaceGuidToLuid
ConvertInterfaceLuidToAlias
dui70
??0DUIXmlParser@DirectUI@@QAE@XZ
?Destroy@DUIXmlParser@DirectUI@@QAEXXZ
?CreateElement@DUIXmlParser@DirectUI@@QAEJPBGPAVElement@2@1PAKPAPAV32@@Z
?SheetProp@Element@DirectUI@@SGPBUPropertyInfo@2@XZ
?Destroy@NativeHWNDHost@DirectUI@@QAEXXZ
?SetID@Element@DirectUI@@QAEJPBG@Z
?SetVisible@Element@DirectUI@@QAEJ_N@Z
?SetAccessible@Element@DirectUI@@QAEJ_N@Z
?Create@NativeHWNDHost@DirectUI@@SGJPBG0PAUHWND__@@PAUHICON__@@HHHHHHPAUHINSTANCE__@@IPAPAV12@@Z
?GetHWND@NativeHWNDHost@DirectUI@@QAEPAUHWND__@@XZ
?Register@ScrollViewer@DirectUI@@SGJXZ
?Register@HWNDElement@DirectUI@@SGJXZ
?Initialize@BaseScrollViewer@DirectUI@@QAEJPAVElement@2@PAK@Z
?Initialize@HWNDElement@DirectUI@@QAEJPAUHWND__@@_NIPAVElement@2@PAK@Z
??1DUIXmlParser@DirectUI@@UAE@XZ
?SetYOffset@BaseScrollViewer@DirectUI@@QAEJH@Z
?SetHeight@Element@DirectUI@@QAEJH@Z
?GetYScrollable@BaseScrollViewer@DirectUI@@QAE_NXZ
?IsScrollable@BaseScrollBar@DirectUI@@QAE_NXZ
?GetClassInfoPtr@ScrollViewer@DirectUI@@SGPAUIClassInfo@2@XZ
?GetClassInfoPtr@HWNDElement@DirectUI@@SGPAUIClassInfo@2@XZ
?OnInput@BaseScrollViewer@DirectUI@@UAEXPAUInputEvent@2@@Z
??1ScrollViewer@DirectUI@@UAE@XZ
?OnListenedEvent@BaseScrollViewer@DirectUI@@UAEXPAVElement@2@PAUEvent@2@@Z
?OnListenedInput@BaseScrollViewer@DirectUI@@UAEXPAVElement@2@PAUInputEvent@2@@Z
?OnListenedPropertyChanged@ScrollViewer@DirectUI@@UAEXPAVElement@2@PBUPropertyInfo@2@HPAVValue@2@2@Z
?OnListenedPropertyChanging@BaseScrollViewer@DirectUI@@UAE_NPAVElement@2@PBUPropertyInfo@2@HPAVValue@2@2@Z
?OnListenerDetach@BaseScrollViewer@DirectUI@@UAEXPAVElement@2@@Z
?OnListenerAttach@BaseScrollViewer@DirectUI@@UAEXPAVElement@2@@Z
?SetParseErrorCallback@DUIXmlParser@DirectUI@@QAEXP6GXPBG0HPAX@Z1@Z
?SetGetSheetCallback@DUIXmlParser@DirectUI@@QAEXP6GPAVValue@2@PBGPAX@Z1@Z
?Initialize@DUIXmlParser@DirectUI@@IAEJXZ
?GetSheet@DUIXmlParser@DirectUI@@QAEJPBGPAPAVValue@2@@Z
?SetXMLFromResource@DUIXmlParser@DirectUI@@QAEJIPAUHINSTANCE__@@0@Z
?IsValidProperty@ClassInfoBase@DirectUI@@UBE_NPBUPropertyInfo@2@@Z
?IsSubclassOf@ClassInfoBase@DirectUI@@UBE_NPAUIClassInfo@2@@Z
?GetModule@ClassInfoBase@DirectUI@@UBEPAUHINSTANCE__@@XZ
?IsGlobal@ClassInfoBase@DirectUI@@UBE_NXZ
?AddChild@ClassInfoBase@DirectUI@@UAEXXZ
?RemoveChild@ClassInfoBase@DirectUI@@UAEXXZ
?GetChildren@ClassInfoBase@DirectUI@@UBEHXZ
?AssertPIZeroRef@ClassInfoBase@DirectUI@@UBEXXZ
??1ClassInfoBase@DirectUI@@UAE@XZ
?SetAccName@Element@DirectUI@@QAEJPBG@Z
?GetAdjacent@Element@DirectUI@@UAEPAV12@PAV12@HPBUNavReference@2@K@Z
?SetYBarVisibility@BaseScrollViewer@DirectUI@@QAEJH@Z
?GetHWND@HWNDElement@DirectUI@@UAEPAUHWND__@@XZ
?GetName@ClassInfoBase@DirectUI@@UBEPBGXZ
?GetGlobalIndex@ClassInfoBase@DirectUI@@UBEIXZ
?GetPICount@ClassInfoBase@DirectUI@@UBEIXZ
?GetByClassIndex@ClassInfoBase@DirectUI@@UAEPBUPropertyInfo@2@I@Z
?EnumPropertyInfo@ClassInfoBase@DirectUI@@UAEPBUPropertyInfo@2@I@Z
?Release@ClassInfoBase@DirectUI@@UAEHXZ
?AddRef@ClassInfoBase@DirectUI@@UAEXXZ
??0ClassInfoBase@DirectUI@@QAE@XZ
?GetClassInfoPtr@Element@DirectUI@@SGPAUIClassInfo@2@XZ
?IsDescendent@Element@DirectUI@@QAE_NPAV12@@Z
??1Element@DirectUI@@UAE@XZ
?HandleUiaEventListener@Element@DirectUI@@UAEXPAUEvent@2@@Z
?HandleUiaPropertyChangingListener@Element@DirectUI@@UAEXPBUPropertyInfo@2@@Z
?HandleUiaPropertyListener@Element@DirectUI@@UAEXPBUPropertyInfo@2@HPAVValue@2@1@Z
?HandleUiaDestroyListener@Element@DirectUI@@UAEXXZ
?GetElementProviderImpl@Element@DirectUI@@UAEJPAVInvokeHelper@2@PAPAVElementProvider@2@@Z
?DefaultAction@Element@DirectUI@@UAEJXZ
?GetAccessibleImpl@Element@DirectUI@@UAEJPAPAUIAccessible@@@Z
?GetKeyFocused@Element@DirectUI@@UAE_NXZ
?RemoveTooltip@Element@DirectUI@@MAEXPAV12@@Z
?ActivateTooltip@Element@DirectUI@@MAEXPAV12@K@Z
?UpdateTooltip@Element@DirectUI@@MAEXPAV12@@Z
?OnUnHosted@Element@DirectUI@@MAEXPAV12@@Z
?OnHosted@Element@DirectUI@@MAEXPAV12@@Z
?_SelfLayoutUpdateDesiredSize@Element@DirectUI@@MAE?AUtagSIZE@@HHPAVSurface@2@@Z
?_SelfLayoutDoLayout@Element@DirectUI@@MAEXHH@Z
?QueryInterface@Element@DirectUI@@UAGJABU_GUID@@PAPAX@Z
?MessageCallback@Element@DirectUI@@UAEIPAUtagGMSG@@@Z
?SetKeyFocus@Element@DirectUI@@UAEXXZ
?EnsureVisible@Element@DirectUI@@UAE_NHHHH@Z
?Remove@Element@DirectUI@@UAEJPAPAV12@I@Z
?Insert@Element@DirectUI@@UAEJPAPAV12@II@Z
?Add@Element@DirectUI@@UAEJPAPAV12@I@Z
?GetContentSize@Element@DirectUI@@UAE?AUtagSIZE@@HHPAVSurface@2@@Z
?Paint@Element@DirectUI@@UAEXPAUHDC__@@PBUtagRECT@@1PAU4@2@Z
?OnEvent@Element@DirectUI@@UAEXPAUEvent@2@@Z
?OnDestroy@Element@DirectUI@@UAEXXZ
?OnMouseFocusMoved@Element@DirectUI@@UAEXPAV12@0@Z
?OnKeyFocusMoved@Element@DirectUI@@UAEXPAV12@0@Z
?OnInput@Element@DirectUI@@UAEXPAUInputEvent@2@@Z
?OnGroupChanged@Element@DirectUI@@UAEXH_N@Z
?OnPropertyChanged@Element@DirectUI@@UAEXPAUPropertyInfo@2@HPAVValue@2@1@Z
?OnPropertyChanged@Element@DirectUI@@UAEXPBUPropertyInfo@2@HPAVValue@2@1@Z
?OnPropertyChanging@Element@DirectUI@@UAE_NPAUPropertyInfo@2@HPAVValue@2@1@Z
?OnPropertyChanging@Element@DirectUI@@UAE_NPBUPropertyInfo@2@HPAVValue@2@1@Z
?GetContentStringAsDisplayed@Element@DirectUI@@UAEPBGPAPAVValue@2@@Z
?IsContentProtected@Element@DirectUI@@UAE_NXZ
?IsRTLReading@Element@DirectUI@@UAE_NXZ
??0Element@DirectUI@@QAE@XZ
?GetKeyWithin@Element@DirectUI@@QAE_NXZ
?IsDestroyed@Element@DirectUI@@QAE_NXZ
?DestroyAll@Element@DirectUI@@QAEJ_N@Z
?Destroy@Element@DirectUI@@QAEJ_N@Z
StrToID
?FindDescendent@Element@DirectUI@@QAEPAV12@G@Z
?EnsureVisible@Element@DirectUI@@QAE_NXZ
?Initialize@ClassInfoBase@DirectUI@@QAEJPAUHINSTANCE__@@PBG_NPBQBUPropertyInfo@2@I@Z
??1CritSecLock@DirectUI@@QAE@XZ
?Register@ClassInfoBase@DirectUI@@QAEJXZ
?ClassExist@ClassInfoBase@DirectUI@@SG_NPAPAUIClassInfo@2@PBQBUPropertyInfo@2@IPAU32@PAUHINSTANCE__@@PBG_N@Z
??0CritSecLock@DirectUI@@QAE@PAU_RTL_CRITICAL_SECTION@@@Z
?GetFactoryLock@Element@DirectUI@@SGPAU_RTL_CRITICAL_SECTION@@XZ
?Register@Element@DirectUI@@SGJXZ
?SetLayoutPos@Element@DirectUI@@QAEJH@Z
?AddListener@Element@DirectUI@@QAEJPAUIElementListener@2@@Z
?GetHighDPI@Element@DirectUI@@QAE_NXZ
?Remove@Element@DirectUI@@QAEJPAV12@@Z
?RemoveListener@Element@DirectUI@@QAEXPAUIElementListener@2@@Z
?SetSelected@Element@DirectUI@@QAEJ_N@Z
??0Button@DirectUI@@QAE@XZ
?OnPropertyChanged@Button@DirectUI@@UAEXPBUPropertyInfo@2@HPAVValue@2@1@Z
?OnInput@Button@DirectUI@@UAEXPAUInputEvent@2@@Z
?DefaultAction@Button@DirectUI@@UAEJXZ
?OnLostDialogFocus@Button@DirectUI@@UAE_NPAVDialogElement@2@@Z
?OnReceivedDialogFocus@Button@DirectUI@@UAE_NPAVDialogElement@2@@Z
??1Button@DirectUI@@UAE@XZ
?GetVScroll@ScrollViewer@DirectUI@@MAEPAVBaseScrollBar@2@XZ
?GetHScroll@ScrollViewer@DirectUI@@MAEPAVBaseScrollBar@2@XZ
?AddChildren@ScrollViewer@DirectUI@@MAEJXZ
?CreateScrollBars@ScrollViewer@DirectUI@@MAEJXZ
?Add@BaseScrollViewer@DirectUI@@UAEJPAPAVElement@2@I@Z
?OnEvent@BaseScrollViewer@DirectUI@@UAEXPAUEvent@2@@Z
?OnPropertyChanged@ScrollViewer@DirectUI@@UAEXPBUPropertyInfo@2@HPAVValue@2@1@Z
?OnPropertyChanging@BaseScrollViewer@DirectUI@@UAE_NPBUPropertyInfo@2@HPAVValue@2@1@Z
??0ScrollViewer@DirectUI@@QAE@XZ
??1HWNDElement@DirectUI@@UAE@XZ
?WndProc@HWNDElement@DirectUI@@UAEJPAUHWND__@@IIJ@Z
?CreateStyleParser@HWNDElement@DirectUI@@UAEJPAPAVDUIXmlParser@2@@Z
?CanSetFocus@HWNDElement@DirectUI@@UAE_NXZ
?OnCompositionChanged@HWNDElement@DirectUI@@UAEXXZ
?OnWmThemeChanged@HWNDElement@DirectUI@@UAEXIJ@Z
?OnGetDlgCode@HWNDElement@DirectUI@@UAEXPAUtagMSG@@PAJ@Z
?OnNoChildWithShortcutFound@HWNDElement@DirectUI@@UAEXPAUKeyboardEvent@2@@Z
?OnThemeChanged@HWNDElement@DirectUI@@UAEXPAUThemeChangedEvent@2@@Z
?Initialize@Element@DirectUI@@QAEJIPAV12@PAK@Z
?GetAccessibleImpl@HWNDElement@DirectUI@@UAEJPAPAUIAccessible@@@Z
?RemoveTooltip@HWNDElement@DirectUI@@UAEXPAVElement@2@@Z
?ActivateTooltip@HWNDElement@DirectUI@@UAEXPAVElement@2@K@Z
?UpdateTooltip@HWNDElement@DirectUI@@UAEXPAVElement@2@@Z
?OnEvent@HWNDElement@DirectUI@@UAEXPAUEvent@2@@Z
?OnDestroy@HWNDElement@DirectUI@@UAEXXZ
?OnInput@HWNDElement@DirectUI@@UAEXPAUInputEvent@2@@Z
?OnGroupChanged@HWNDElement@DirectUI@@UAEXH_N@Z
?OnPropertyChanged@HWNDElement@DirectUI@@UAEXPBUPropertyInfo@2@HPAVValue@2@1@Z
??0HWNDElement@DirectUI@@QAE@XZ
?Create@HWNDElement@DirectUI@@SGJPAUHWND__@@_NIPAVElement@2@PAKPAPAV42@@Z
?Host@NativeHWNDHost@DirectUI@@QAEXPAVElement@2@@Z
?EndDefer@Element@DirectUI@@QAEXK@Z
?StartDefer@Element@DirectUI@@QAEXPAK@Z
??0DCSurface@DirectUI@@QAE@PAUHDC__@@@Z
?Create@BorderLayout@DirectUI@@SGJPAPAVLayout@2@@Z
?Destroy@Layout@DirectUI@@QAEXXZ
??1DCSurface@DirectUI@@UAE@XZ
UnInitThread
InitThread
UnInitProcessPriv
InitProcessPriv
?CreateGraphic@Value@DirectUI@@SGPAV12@PAUHICON__@@_N11@Z
?CreateGraphic@Value@DirectUI@@SGPAV12@PAUHBITMAP__@@EI_N11@Z
?ContentProp@Element@DirectUI@@SGPBUPropertyInfo@2@XZ
?RemoveLocalValue@Element@DirectUI@@QAEJP6GPBUPropertyInfo@2@XZ@Z
?SetValue@Element@DirectUI@@QAEJP6GPBUPropertyInfo@2@XZHPAVValue@2@@Z
?Release@Value@DirectUI@@QAEXXZ
?GetKeyFocusedElement@HWNDElement@DirectUI@@SGPAVElement@2@XZ
?RemoveAll@Element@DirectUI@@QAEJXZ
?Insert@Element@DirectUI@@QAEJPAV12@I@Z
?Context@Button@DirectUI@@SG?AVUID@@XZ
?Click@Button@DirectUI@@SG?AVUID@@XZ
?KeyboardNavigate@Element@DirectUI@@SG?AVUID@@XZ
?GetParent@Element@DirectUI@@QAEPAV12@XZ
?GetFontWeight@Element@DirectUI@@QAEHXZ
?SetFontWeight@Element@DirectUI@@QAEJH@Z
?SetAccDesc@Element@DirectUI@@QAEJPBG@Z
?SetTooltip@Element@DirectUI@@QAEJ_N@Z
?GetID@Element@DirectUI@@QAEGXZ
?GetLayoutPos@Element@DirectUI@@QAEHXZ
?GetSelected@Element@DirectUI@@QAE_NXZ
?Register@Button@DirectUI@@SGJXZ
?Add@Element@DirectUI@@QAEJPAV12@@Z
?SetContentString@Element@DirectUI@@QAEJPBG@Z
?Initialize@Button@DirectUI@@QAEJIPAVElement@2@PAK@Z
?GetRoot@Element@DirectUI@@QAEPAV12@XZ
?MapElementPoint@Element@DirectUI@@QAEXPAV12@PBUtagPOINT@@PAU3@@Z
?GetClassInfoPtr@Button@DirectUI@@SGPAUIClassInfo@2@XZ
Exports
Exports
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
RunVANUI
RunVANW
Sections
.text Size: 120KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 493KB - Virtual size: 492KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ