DllRegisterServer
lhxXfY9mIrDZ
Static task
static1
Behavioral task
behavioral1
Sample
ONKVD.dll
Resource
win7-20240903-en
Target
JaffaCakes118_2550277b280d81a8a049baffea87e2ca6b72d40e08646349b5b690880bd154ec
Size
231KB
MD5
4a387db188aefb0dd2a6984cd36966e3
SHA1
918dd46f7912b93390c2fe590bf99c89a016ec95
SHA256
2550277b280d81a8a049baffea87e2ca6b72d40e08646349b5b690880bd154ec
SHA512
8ebafef09a11aaaeabba8e3f31c6c9430a2ab0ae86e27710c7c410edc6219261b0ccb802a164015cecc298e22af87d51a3e34adc4d47dba3e95d494581f71dd8
SSDEEP
6144:xGc/vj24AzV/+GqDDm74lUwjk6cD5wHUH:xpjYzd+/Da7aUGA5RH
Checks for missing Authenticode signature.
resource |
---|
unpack001/ONKVD.dll |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetLocaleInfoA
FlushFileBuffers
GetStringTypeW
GetProcAddress
LoadLibraryW
VirtualAlloc
CloseHandle
WriteFile
VirtualProtect
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
HeapSize
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
SetStdHandle
LoadLibraryA
HeapAlloc
GetCommandLineA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
HeapReAlloc
GetSystemInfo
ExitProcess
GetModuleHandleA
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
UnhandledExceptionFilter
DisableThreadLibraryCalls
SetFilePointer
GetACP
GetOEMCP
GetCPInfo
RtlUnwind
InterlockedExchange
VirtualQuery
ShowWindow
DllRegisterServer
lhxXfY9mIrDZ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ