Static task
static1
Behavioral task
behavioral1
Sample
hack.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
hack.dll
Resource
win10v2004-20241007-en
General
-
Target
hack.dll
-
Size
1.2MB
-
MD5
c0f8bbdb562fe5a58c07dda074de78e9
-
SHA1
4163fb5b480159ad0decd3c78ed144c699dac499
-
SHA256
cad21bc8429b675b88b3c3844c0acc3756ac23c5a242b3bbfb67bfcca0fbe4bc
-
SHA512
bea200a1ae59da156e9e0c6182124902bc917c14290e234799ffe2304695ec64841ac3c53f70c2dcaf2735a2887435ab9f15d07bdb044cdcfc2cd12ab26fbe1f
-
SSDEEP
24576:QfuRjVdiXPlZRJMZXUzIEDGnWK3t//k0:waj3iPRRIED4f3tHk0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource hack.dll
Files
-
hack.dll.dll windows:6 windows x86 arch:x86
08d79402d062c981a3b76090efaa547f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
opengl32
glDepthFunc
glVertex3fv
glVertex3f
glPointSize
glLineWidth
glEnd
glColor4f
glBegin
glTexEnvi
glDepthRange
glClearColor
glReadPixels
glViewport
glVertexPointer
glTexParameteri
glTexImage2D
glTexCoordPointer
glScissor
glPushMatrix
glPushAttrib
glPopMatrix
glPopAttrib
glPolygonMode
glPixelStorei
glOrtho
glMatrixMode
glLoadIdentity
glGetIntegerv
glGenTextures
glEnableClientState
glEnable
glDrawElements
glDisableClientState
glDisable
glDeleteTextures
glColorPointer
glBlendFunc
glBindTexture
kernel32
GetFileType
GetStdHandle
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetModuleFileNameW
GetModuleHandleExW
ReadFile
LoadLibraryExW
InterlockedFlushSList
RtlUnwind
RaiseException
InitializeSListHead
GetCurrentProcessId
GetStartupInfoW
IsDebuggerPresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsProcessorFeaturePresent
GetCurrentThreadId
WaitForSingleObjectEx
ResetEvent
SetEvent
CloseHandle
VirtualQuery
GetCPInfo
GetStringTypeW
GetLocaleInfoW
LCMapStringW
MultiByteToWideChar
SetEndOfFile
GetTickCount
SetLastError
HeapAlloc
HeapFree
GetProcessHeap
GetNativeSystemInfo
VirtualAlloc
VirtualProtect
VirtualFree
FreeLibrary
FlushFileBuffers
LoadLibraryA
IsBadReadPtr
FindFirstFileA
GetPrivateProfileStringA
lstrlenA
GlobalAlloc
GlobalUnlock
GlobalLock
GlobalFree
QueryPerformanceCounter
QueryPerformanceFrequency
GetLastError
Sleep
CreateThread
DisableThreadLibraryCalls
GetModuleFileNameA
GetModuleHandleA
GetLocalTime
GetCurrentProcess
ExitProcess
FlushInstructionCache
lstrcmpA
FindClose
FindNextFileA
DecodePointer
WriteConsoleW
HeapSize
CreateFileW
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
EncodePointer
HeapReAlloc
DeleteFileW
ReadConsoleW
SetFilePointerEx
GetFileSizeEx
WriteFile
GetConsoleCP
GetProcAddress
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
CreateEventW
SwitchToThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetModuleHandleW
GetConsoleMode
user32
MessageBoxA
LoadCursorA
ClientToScreen
SetCursor
GetClientRect
ReleaseCapture
GetCapture
GetKeyState
EmptyClipboard
GetClipboardData
SetCapture
CloseClipboard
OpenClipboard
SetWindowLongA
ScreenToClient
GetCursorPos
SetCursorPos
WindowFromDC
GetActiveWindow
CallWindowProcA
SetClipboardData
imm32
ImmReleaseContext
ImmGetContext
ImmSetCompositionWindow
Sections
.text Size: 622KB - Virtual size: 621KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 593KB - Virtual size: 593KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 3.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.msvcjmc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ