Static task
static1
Behavioral task
behavioral1
Sample
62a8495f3b293.dll
Resource
win7-20220414-en
General
-
Target
62a8495f3b293.dll
-
Size
436KB
-
MD5
dd165240f5a2de250727eb47e458d7db
-
SHA1
2748f39c430664f6c4c9c1700f1b7d05908d8dfd
-
SHA256
ce3d465a139b6c7ca2b3414a08230b50b1e2e341310113ada498c2aecdce1d96
-
SHA512
5e33d29014cb99754bacd08b766e3f611ed7711c217b4cb26bbc7836a738e06a9a88d960b916e6148320f0d0ba6a4583a2ed1f600af4ea696af30d1ddfec347d
-
SSDEEP
6144:OgM9+UjmlPHBQKICVMLSzJvvsb2Z10DDnapRYcri8f4XAIrIiG:OL9+JPHBcCVMLSzJvvQ2Z16a7gXAIHG
Malware Config
Signatures
Files
-
62a8495f3b293.dll.dll windows x86
d31c477cc159d9752f6e8ef56c0d2af9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
winspool.drv
FindClosePrinterChangeNotification
DeletePrinter
wininet
FindCloseUrlCache
FindFirstUrlCacheEntryExW
advapi32
RegGetValueA
GetSecurityDescriptorControl
version
GetFileVersionInfoA
GetFileVersionInfoSizeW
urlmon
FindMimeFromData
user32
GetClassNameA
GetCaretPos
GetTabbedTextExtentA
LoadKeyboardLayoutA
GetWindowThreadProcessId
GetMenuItemCount
GetMenuItemInfoA
EnumWindows
GetKeyNameTextA
LoadStringW
IsWinEventHookInstalled
GetThreadDesktop
EnumThreadWindows
GetClipCursor
GetWindowRgn
DialogBoxParamA
LoadCursorA
LoadBitmapW
GetWindowInfo
GetUserObjectInformationW
ModifyMenuW
GetMenuContextHelpId
secur32
FreeCredentialsHandle
GetUserNameExA
InitializeSecurityContextW
powrprof
GetCurrentPowerPolicies
ws2_32
shutdown
kernel32
GlobalAddAtomW
GetModuleFileNameA
GetThreadPriority
ExitProcess
GetFileType
FindActCtxSectionStringW
LocalLock
GetBinaryTypeA
GetPrivateProfileSectionNamesW
GlobalLock
GetStartupInfoA
GetCurrencyFormatA
GetPrivateProfileSectionA
ExpandEnvironmentStringsA
GetVolumePathNameW
GetConsoleScreenBufferInfo
GetPriorityClass
GetTapePosition
lstrcpynW
GetLongPathNameA
FindNextFileA
GetUserGeoID
FindFirstChangeNotificationA
VirtualFree
GetSystemInfo
VirtualQueryEx
LocalFileTimeToFileTime
comdlg32
GetFileTitleA
gdi32
GdiFlush
GetDIBits
GetTextCharsetInfo
FillPath
GetROP2
GetCurrentPositionEx
msvcrt
fputwc
fputws
strtol
toupper
fgetws
fgetwc
vfwprintf
strcoll
Sections
.text Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 192KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 76KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt1 Size: 64KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 888B
IMAGE_SCN_MEM_READ
.reloc Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ