Fieldmy
Static task
static1
Behavioral task
behavioral1
Sample
c58d97e033d7b568ce4261959e5e04a5b1f8849ccf4f717bcac79ca728d07ace.dll
Resource
win7-20220414-en
General
-
Target
c58d97e033d7b568ce4261959e5e04a5b1f8849ccf4f717bcac79ca728d07ace
-
Size
445KB
-
MD5
62b048529ddc7e871a9807068ee5cacd
-
SHA1
1aef66bb26dad4ba2fd182f01efd13e44e4bfe31
-
SHA256
c58d97e033d7b568ce4261959e5e04a5b1f8849ccf4f717bcac79ca728d07ace
-
SHA512
74b64e2d78bdec8c82835c5ac7501c3a18a9ad1e25da959bfa08df77fec96ad0a6e61277c2ec4ffadf329961614d5f9f3d012351211782a9ff146fcecc9b1f04
-
SSDEEP
12288:5ylGSE+TflLFQAQFnmxyZdLKxGoHG2gX:5NIdLiRFnmxCLKxGgmX
Malware Config
Signatures
Files
-
c58d97e033d7b568ce4261959e5e04a5b1f8849ccf4f717bcac79ca728d07ace.dll windows x86
dae952d533e1fa7c1b07dd2b5d167ef7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetProcessHeap
GetStdHandle
GetFileType
GetStringTypeW
HeapSize
HeapReAlloc
SetStdHandle
WriteFile
FlushFileBuffers
FreeEnvironmentStringsW
GetACP
IsValidCodePage
FindNextFileA
FindFirstFileExA
FindClose
HeapFree
GetConsoleCP
GetConsoleMode
SetFilePointerEx
CloseHandle
WriteConsoleW
DecodePointer
RemoveDirectoryA
GetTempPathA
GetSystemDirectoryA
CreateProcessA
CreateSemaphoreA
CreateEventA
Sleep
GetCurrentThreadId
VirtualProtectEx
GetVersion
IsProcessorFeaturePresent
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
GetModuleHandleW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
GetCurrentProcess
TerminateProcess
RaiseException
InterlockedFlushSList
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
RtlUnwind
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
HeapAlloc
LCMapStringW
CreateFileW
user32
RegisterHotKey
DispatchMessageA
DrawFrameControl
CallWindowProcA
PostMessageA
RegisterClassExA
SystemParametersInfoA
IsDialogMessageA
LoadImageA
CheckMenuRadioItem
GetClassNameA
SetWindowLongA
FrameRect
FillRect
ClientToScreen
GetCursorPos
GetWindowTextLengthA
DrawIcon
TrackPopupMenu
AppendMenuA
IsWindowEnabled
GetKeyNameTextA
GetFocus
GetActiveWindow
SetFocus
GetClassInfoExA
gdi32
ExtTextOutA
EndPage
StartDocA
SetTextColor
SetBkColor
SaveDC
RestoreDC
Rectangle
GetClipBox
GetCharWidthA
CreateFontIndirectA
CreateBitmap
shlwapi
PathAppendA
PathFindFileNameA
PathStripToRootA
PathAddBackslashA
winspool.drv
GetJobA
DocumentPropertiesA
ClosePrinter
AddPrinterConnectionA
DeletePrinterConnectionA
OpenPrinterA
avifil32
AVIFileInit
AVIBuildFilterA
AVIFileReadData
AVIFileInfoA
AVIFileOpenA
AVIFileExit
comdlg32
GetSaveFileNameA
ChooseFontA
CommDlgExtendedError
ChooseColorA
GetOpenFileNameA
comctl32
ImageList_SetBkColor
ImageList_Remove
ImageList_Destroy
ImageList_SetDragCursorImage
ImageList_SetIconSize
InitCommonControlsEx
Exports
Exports
Sections
.text Size: 371KB - Virtual size: 371KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 62KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ