DllRegisterServer
Static task
static1
Behavioral task
behavioral1
Sample
068c21c00ac1a545c8a03790be3af36b918153a57dd3293d06e8634071667685.dll
Resource
win7-20241010-en
General
-
Target
068c21c00ac1a545c8a03790be3af36b918153a57dd3293d06e8634071667685
-
Size
369KB
-
MD5
3fb2c02f38ec9ba52fb47113e0c754ea
-
SHA1
f30b10385a1fe9a02bf4aaca732b3af5287016da
-
SHA256
068c21c00ac1a545c8a03790be3af36b918153a57dd3293d06e8634071667685
-
SHA512
63211202ce1c2a7171955bef76e16222d05f7d8e67487cb5064e8615433e21c51e98da73152ba04a2205ced734d13d89a04152ecbe1bf949c2d7ddf702bca5ab
-
SSDEEP
6144:O56dLjBFLyztOoVeYIjAmkB8lebi9JqGXdZ32mneM0laNUIbeURK46:YszuzNsjWB8f9JqQ2mnB0l4UMK46
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 068c21c00ac1a545c8a03790be3af36b918153a57dd3293d06e8634071667685
Files
-
068c21c00ac1a545c8a03790be3af36b918153a57dd3293d06e8634071667685.dll regsvr32 windows:6 windows x86 arch:x86
79fb40281049052b3e354a6e444da473
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
ExitProcess
GetNativeSystemInfo
FreeLibrary
HeapAlloc
HeapFree
GetTickCount
VirtualFree
GetProcessHeap
IsBadReadPtr
GetLastError
SetLastError
GetProcAddress
VirtualAlloc
LoadLibraryA
VirtualProtect
Sleep
SetConsoleTextAttribute
SetConsoleCursorPosition
GetStdHandle
SetConsoleCursorInfo
SetEnvironmentVariableA
HeapSize
FlushFileBuffers
GetSystemTimeAsFileTime
HeapReAlloc
GetConsoleMode
GetNumberOfConsoleInputEvents
PeekConsoleInputA
ReadConsoleInputA
SetConsoleMode
MultiByteToWideChar
WideCharToMultiByte
EncodePointer
DecodePointer
CreateThread
GetCurrentThreadId
ExitThread
LoadLibraryExW
EnterCriticalSection
LeaveCriticalSection
IsDebuggerPresent
IsProcessorFeaturePresent
GetCommandLineA
GetModuleHandleExW
AreFileApisANSI
WriteFile
GetModuleFileNameW
DeleteCriticalSection
CreateFileW
CloseHandle
RtlUnwind
ReadFile
ReadConsoleW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetConsoleCP
GetTimeZoneInformation
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
GetFileType
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetEnvironmentStringsW
FreeEnvironmentStringsW
OutputDebugStringW
WriteConsoleW
WaitForSingleObject
GetExitCodeProcess
CreateProcessA
GetFileAttributesExW
SetStdHandle
SetFilePointerEx
GetStringTypeW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
SetEndOfFile
user32
SendMessageA
ShowWindow
winmm
PlaySoundW
Exports
Exports
Sections
.text Size: 120KB - Virtual size: 119KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 210KB - Virtual size: 209KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ