convercontent
decodecontent
delcache
initactivity
uninit
Behavioral task
behavioral1
Sample
428011ab0fca523349a9e952a5f55575b6eae3a2938d2d694dd15083527bd1e4.dll
Resource
win7-20240708-en
Target
428011ab0fca523349a9e952a5f55575b6eae3a2938d2d694dd15083527bd1e4
Size
2.0MB
MD5
f0a4f8999fbe8a899e6577fc21cffc97
SHA1
127632bb986d9c9ec5a2ef0424d0ced45764d82d
SHA256
428011ab0fca523349a9e952a5f55575b6eae3a2938d2d694dd15083527bd1e4
SHA512
4dd904b8514697031fb2f61c0a6ed577cd841bcc16baaceada7354b46484244d83045e648f40dd00d1b07ff47e52abe9dd4bd63fa39d79b9f43dfd2dfef03ba1
SSDEEP
49152:EOB6fQdeP7+s8KuqGaX0ToIBAUZLYkS+:pV1JBAUZL5S+
resource | yara_rule |
---|---|
sample | family_blackmoon |
Checks for missing Authenticode signature.
resource |
---|
428011ab0fca523349a9e952a5f55575b6eae3a2938d2d694dd15083527bd1e4 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LCMapStringA
GetProcAddress
FreeLibrary
GetCommandLineA
GetStartupInfoA
CreateProcessA
WaitForSingleObject
DeleteFileA
SetFileAttributesA
SetFilePointer
GetFileSize
ReadFile
CreateFileA
WriteFile
CloseHandle
FormatMessageA
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
GetUserDefaultLCID
GetModuleFileNameA
IsBadReadPtr
HeapReAlloc
ExitProcess
LoadLibraryA
GetTempPathA
GetModuleHandleA
VirtualFree
InterlockedDecrement
InterlockedIncrement
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
TryEnterCriticalSection
GetTimeFormatA
GetDateFormatA
Sleep
OutputDebugStringA
lstrcmpA
lstrlenA
GetTickCount
GetACP
GetCurrentThreadId
GetCurrentThread
lstrcmpiA
GlobalDeleteAtom
LocalFree
LocalAlloc
TlsAlloc
GlobalHandle
TlsFree
GlobalReAlloc
TlsSetValue
LocalReAlloc
TlsGetValue
SetErrorMode
lstrcatA
lstrcpyA
lstrcpynA
GetVersion
MulDiv
GlobalFlags
WritePrivateProfileStringA
SetLastError
GetLastError
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
LockResource
LoadResource
FindResourceA
GetProcessVersion
GetCurrentProcess
FlushFileBuffers
GetCPInfo
GetOEMCP
RtlUnwind
RaiseException
HeapSize
SetHandleCount
GetStdHandle
GetFileType
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetVersionExA
IsBadWritePtr
LCMapStringW
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
IsBadCodePtr
SetStdHandle
InterlockedExchange
lstrcmpiW
HeapDestroy
HeapCreate
lstrcmpW
MultiByteToWideChar
WideCharToMultiByte
HeapAlloc
RtlZeroMemory
lstrlenW
InitializeCriticalSection
HeapFree
GetProcessHeap
RtlMoveMemory
VirtualAlloc
TerminateProcess
GetEnvironmentVariableA
VirtualProtect
VirtualQuery
GetLocalTime
CreateEventA
IsIconic
SystemParametersInfoA
RegisterWindowMessageA
SetForegroundWindow
GetForegroundWindow
GetMessagePos
GetMessageTime
DefWindowProcA
RemovePropA
CallWindowProcA
GetPropA
SetPropA
GetClassLongA
CreateWindowExA
DestroyWindow
GetMenuItemID
GetSubMenu
GetMenu
RegisterClassA
GetClassInfoA
WinHelpA
GetCapture
GetTopWindow
CopyRect
GetClientRect
AdjustWindowRectEx
IsWindow
SetActiveWindow
GetSysColor
MapWindowPoints
UpdateWindow
LoadIconA
LoadCursorA
GetSysColorBrush
LoadStringA
PostThreadMessageA
DestroyMenu
CreateDialogIndirectParamA
EndDialog
IsDialogMessageA
GetWindowPlacement
SendDlgItemMessageA
GetDlgItem
GrayStringA
DrawTextA
TabbedTextOutA
ReleaseDC
GetDC
GetMenuItemCount
GetWindowTextA
SetWindowTextA
ClientToScreen
GetWindow
GetDlgCtrlID
GetWindowRect
PtInRect
GetClassNameA
UnregisterClassA
UnhookWindowsHookEx
RegisterClipboardFormatA
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
SetWindowsHookExA
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
EnableWindow
SetCursor
PostMessageA
PostQuitMessage
SendMessageA
MessageBoxA
wsprintfA
DispatchMessageA
TranslateMessage
GetMessageA
PeekMessageA
GetSystemMetrics
SetFocus
ShowWindow
SetWindowPos
SetWindowLongA
GetCursorPos
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
Escape
ExtTextOutA
TextOutA
RectVisible
DeleteObject
DeleteDC
SaveDC
RestoreDC
SelectObject
SetBkColor
GetObjectA
GetStockObject
PtVisible
GetDeviceCaps
SetTextColor
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
GetClipBox
CreateBitmap
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegEnumKeyExA
RegOpenKeyA
CryptGetHashParam
CryptDestroyHash
CryptHashData
CryptReleaseContext
CryptCreateHash
CryptAcquireContextA
RegOpenKeyExA
GdiplusStartup
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
CLSIDFromProgID
CLSIDFromString
CoCreateInstance
OleRun
CoUninitialize
CoInitialize
CoRegisterMessageFilter
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
StrToIntW
StrToIntExW
PathFileExistsA
WinHttpCrackUrl
CryptStringToBinaryA
CryptBinaryToStringA
VariantInit
SafeArrayAllocDescriptor
SafeArrayAllocData
SafeArrayGetDim
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayGetElemsize
SystemTimeToVariantTime
SysFreeString
VarR8FromCy
VarR8FromBool
VariantChangeType
LoadTypeLi
LHashValOfNameSys
RegisterTypeLi
VariantCopy
SafeArrayCreate
SysAllocString
VariantClear
SafeArrayDestroy
VariantTimeToSystemTime
ord8
OpenPrinterA
DocumentPropertiesA
ClosePrinter
ord17
convercontent
decodecontent
delcache
initactivity
uninit
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ