DllRegisterServer
Static task
static1
Behavioral task
behavioral1
Sample
ad889ea0fb9c0c9cc5acf7e4ee60b11d7d3e2a57489b6037af604381219905ca.dll
Resource
win7-20240903-en
General
-
Target
ad889ea0fb9c0c9cc5acf7e4ee60b11d7d3e2a57489b6037af604381219905ca
-
Size
716KB
-
MD5
f7fc22d45f3380173f8ac127175a0edb
-
SHA1
a20310381f258910e4c63e6f9f0f213ad8b45e77
-
SHA256
ad889ea0fb9c0c9cc5acf7e4ee60b11d7d3e2a57489b6037af604381219905ca
-
SHA512
e16ae294573ce5186ce1e9ab9e7197051d3b7a2fd1d26e4dc42b64d66a441ab24b0df3dd74a19d9454cd9658e02ffbc926f3ef660b611cc47495b7e5ec08dae4
-
SSDEEP
12288:uBicXbXtFSCaG1vqZR6KtfnCLiW0Of7qIPRJsRRV9S+QykE:Mnda6vqZltv3Of717sRRV9SB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ad889ea0fb9c0c9cc5acf7e4ee60b11d7d3e2a57489b6037af604381219905ca
Files
-
ad889ea0fb9c0c9cc5acf7e4ee60b11d7d3e2a57489b6037af604381219905ca.dll regsvr32 windows:4 windows x86 arch:x86
a8500bf410804986a14447eb1494c61a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
FindFirstFileA
GetVolumeInformationA
GetFullPathNameA
CreateFileA
FileTimeToLocalFileTime
GetFileAttributesA
GetFileTime
GetSystemInfo
HeapReAlloc
GetTimeFormatA
GetDateFormatA
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ExitProcess
GetCommandLineA
RtlUnwind
RaiseException
HeapSize
HeapDestroy
HeapCreate
FindClose
GetStdHandle
GetACP
Sleep
LCMapStringA
LCMapStringW
GetTimeZoneInformation
SetHandleCount
GetFileType
GetStartupInfoA
GetConsoleCP
GetConsoleMode
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
GetLocaleInfoW
SetEnvironmentVariableA
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
WritePrivateProfileStringA
GetOEMCP
GetCPInfo
InterlockedIncrement
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
FileTimeToSystemTime
GetThreadLocale
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GlobalFlags
CloseHandle
GetCurrentProcessId
GetCurrentThread
ConvertDefaultLocale
GetModuleFileNameA
EnumResourceLanguagesA
GetLocaleInfoA
lstrcmpA
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcmpW
GetVersionExA
GlobalAlloc
FormatMessageA
LocalFree
MulDiv
InterlockedDecrement
GlobalLock
GlobalUnlock
GlobalFree
FreeResource
VirtualProtect
VirtualAlloc
IsBadReadPtr
GetProcessHeap
VirtualFree
GetModuleHandleW
HeapFree
HeapAlloc
FreeLibrary
VirtualQuery
GetModuleHandleA
LockResource
LoadLibraryA
GetProcAddress
SetLastError
SizeofResource
GetTickCount
LoadResource
FindResourceA
GetVersion
CompareStringA
GetLastError
InterlockedExchange
MultiByteToWideChar
CompareStringW
WideCharToMultiByte
lstrlenA
CreateFileW
user32
InvalidateRect
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
RegisterClipboardFormatA
PostThreadMessageA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetForegroundWindow
GetLastActivePopup
GetTopWindow
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
GetKeyState
SetForegroundWindow
IsWindowVisible
UpdateWindow
PostMessageA
MessageBoxA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
AdjustWindowRectEx
EqualRect
PtInRect
GetDlgCtrlID
DefWindowProcA
LoadCursorA
SetWindowLongA
SetWindowPos
SetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
GetWindowTextLengthA
GetWindowTextA
GetWindow
SetFocus
GetMenuItemID
GetMenuItemCount
GetSubMenu
UnhookWindowsHookEx
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetWindowLongA
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
EndDialog
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
GetFocus
GetParent
ModifyMenuA
GetMenuState
ReleaseDC
GetDC
CopyRect
IsWindow
GetMessageA
GetSystemMenu
IsIconic
LoadIconA
DrawIcon
GetClientRect
SendMessageA
GetSysColorBrush
DestroyMenu
EndPaint
BeginPaint
TranslateMessage
GetMenu
EnableMenuItem
TranslateAcceleratorA
AppendMenuA
DispatchMessageA
GetSystemMetrics
CheckMenuItem
CharUpperA
EnableWindow
IsRectEmpty
CopyAcceleratorTableA
CharNextA
ReleaseCapture
SetCapture
UnregisterClassA
OffsetRect
GetWindowDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
GetCursorPos
ValidateRect
SetWindowContextHelpId
MapDialogRect
GetWindowThreadProcessId
SetCursor
PostQuitMessage
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
RegisterWindowMessageA
SendDlgItemMessageA
WinHelpA
GetClassLongA
GetCapture
SetWindowsHookExA
CallWindowProcA
CallNextHookEx
IsChild
gdi32
SetMapMode
DeleteObject
GetViewportExtEx
GetWindowExtEx
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
GetStockObject
GetMapMode
GetBkColor
GetTextColor
GetRgnBox
RestoreDC
SaveDC
GetObjectA
SetBkColor
SetTextColor
GetClipBox
GetDeviceCaps
CreateBitmap
CreateRectRgnIndirect
comdlg32
GetFileTitleA
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
advapi32
RegSetValueExA
RegCreateKeyExA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA
RegOpenKeyA
RegCloseKey
shell32
ShellExecuteA
shlwapi
PathFindFileNameA
PathStripToRootA
PathFindExtensionA
PathIsUNCA
oledlg
ord8
ole32
CoFreeUnusedLibraries
OleUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
OleInitialize
CoTaskMemAlloc
CoTaskMemFree
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
oleaut32
SysStringLen
SysAllocStringByteLen
VariantClear
VariantChangeType
VariantInit
SysAllocStringLen
VariantCopy
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
OleCreateFontIndirect
SysAllocString
SysFreeString
winmm
PlaySoundA
Exports
Exports
Sections
.text Size: 320KB - Virtual size: 316KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 96KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 152KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 96KB - Virtual size: 93KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 48KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ