aaa
upstart
Behavioral task
behavioral1
Sample
loaddy001.dll
Resource
win10v2004-20250314-en
Target
loaddy001.dll
Size
252KB
MD5
d507c9ba6f16864d576d47b671a1f919
SHA1
f936a87be1e57aa967a36743188373a6b434da17
SHA256
e6a8dd2b6348d3a2b784529de47e078730c9ad76a1ce6e7326c5136c38af0868
SHA512
45e3bce73ccebe58ff33a43fba767cb6cd4f28785941a372229ff340bbc01264a2ca8b96ec8c7cad0517659768d6adbc4bed806ac88ca9c9c74b4153e693b596
SSDEEP
3072:GMroksXUERhFcmvhc7ADcTdeiGu0/7BRVaqOw6I4/OpghLMUvM:GXvhxDx/AOpgt
resource | yara_rule |
---|---|
sample | family_blackmoon |
Checks for missing Authenticode signature.
resource |
---|
loaddy001.dll |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrcatA
CreateWaitableTimerA
SetWaitableTimer
CloseHandle
GetProcessHeap
GetModuleHandleA
ExitProcess
HeapAlloc
HeapReAlloc
HeapFree
IsBadReadPtr
WideCharToMultiByte
GetUserDefaultLCID
MultiByteToWideChar
FormatMessageA
GetTickCount
GetEnvironmentVariableA
WriteFile
CreateFileA
GetCommandLineA
GetModuleFileNameA
FreeLibrary
GetProcAddress
LoadLibraryA
LCMapStringA
GetComputerNameA
CreateThread
TranslateMessage
DispatchMessageA
PeekMessageA
MsgWaitForMultipleObjects
MessageBoxA
wsprintfA
GetMessageA
inet_addr
SendARP
SafeArrayAllocDescriptor
VariantInit
SysAllocString
SafeArrayDestroy
VariantClear
SafeArrayAllocData
SafeArrayCreate
VariantCopy
RegisterTypeLi
LHashValOfNameSys
LoadTypeLi
VariantChangeType
VarR8FromBool
VarR8FromCy
SafeArrayGetElemsize
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetDim
SysFreeString
OleRun
CLSIDFromProgID
CLSIDFromString
CoUninitialize
CoCreateInstance
CoInitializeSecurity
CoInitialize
IIDFromString
CoSetProxyBlanket
WinHttpReceiveResponse
WinHttpSetCredentials
WinHttpSetTimeouts
WinHttpReadData
WinHttpWriteData
WinHttpSendRequest
WinHttpOpenRequest
WinHttpConnect
WinHttpCrackUrl
WinHttpOpen
WinHttpQueryHeaders
WinHttpAddRequestHeaders
WinHttpSetOption
WinHttpCloseHandle
WinHttpQueryDataAvailable
InternetReadFile
HttpSendRequestA
HttpOpenRequestA
InternetConnectA
InternetOpenA
HttpQueryInfoA
HttpAddRequestHeadersA
InternetSetOptionA
InternetCloseHandle
calloc
strncmp
memmove
modf
realloc
strrchr
floor
__CxxFrameHandler
_CIfmod
malloc
free
sprintf
strchr
??3@YAXPAX@Z
??2@YAPAXI@Z
_ftol
atoi
PathFileExistsA
aaa
upstart
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ