gml01[.]dat | Triage™

General

Target
gml01.dat
Size 368KB
Sample220321-vfpmdadca6
SHA256 7a227df10f82dc2e11822716aa04e91797e9a3011976a4e5884deb704bf0134a
MD5 81c36cf8c2b7ad174dc978f9f37ffdf6
SHA1 f12e439cca797508509120db4aaeeb32aaa24f12
SHA512 b803d6f1136df5fcad65b06ac67e74af14be716601e20f4269f63f652dbd50b80ee239e49c38a14eb76e45bc79959a4ca97dd54253c7f2fd8e92718ca70cd0fa
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

gml01.dat

.dll 368KB

gml01.dat

IMPHASH 78d96f0c3be707d45006fd9759c6ef89
SHA256 7a227df10f82dc2e11822716aa04e91797e9a3011976a4e5884deb704bf0134a
MD5 81c36cf8c2b7ad174dc978f9f37ffdf6
SHA1 f12e439cca797508509120db4aaeeb32aaa24f12
SHA512 b803d6f1136df5fcad65b06ac67e74af14be716601e20f4269f63f652dbd50b80ee239e49c38a14eb76e45bc79959a4ca97dd54253c7f2fd8e92718ca70cd0fa
MD5 SHA1 SHA512

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

37476

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

user32

GetWindow MessageBoxIndirectW GetScrollPos GetDlgItemTextA BringWindowToTop OpenIcon PeekMessageA

comctl32

ord338 ord333 ord324 ord388 ord236

msvfw32

DrawDibDraw DrawDibBegin DrawDibStart DrawDibOpen ICCompressorChoose ICClose ICOpen ICInfo

kernel32

CreateFileW CloseHandle WriteConsoleW DecodePointer SetFilePointerEx GetConsoleMode GetConsoleCP WriteFile FlushFileBuffers SetStdHandle HeapReAlloc HeapSize QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW GetCurrentProcess TerminateProcess InterlockedFlushSList RtlUnwind GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW RaiseException ExitProcess GetModuleHandleExW GetModuleFileNameW HeapAlloc HeapFree FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW GetStdHandle GetFileType LCMapStringW GetProcessHeap GetStringTypeW

Sharing