PluginInit
Static task
static1
Behavioral task
behavioral1
Sample
98hd0.dll
Resource
win7-20220414-en
General
-
Target
98hd0.dll
-
Size
600KB
-
MD5
95a7228c8037415eea95e0d17e39215d
-
SHA1
c97c25b17748725f0bd0548d4948b8b000082465
-
SHA256
c3633dd0ea01015aa923cc81bf1cb6ff2a0c4c4cbf807d3c2098d492a559198d
-
SHA512
e92c82b9cc3192ebe2185721fa7900afa3faf583438d3e11909a9f90d37678548e42ecdab73c31da9b360fd1438ea669c8677b36c290b9b141eb0ae19c632e1d
-
SSDEEP
12288:Q6nme9S91S2cTyWGqDOvIJ2ApAzfGJ/K2jfTBythw07ueNUu0F1mb:3me9S91S2c/OvA2MgM98thw07uXu0
Malware Config
Signatures
Files
-
98hd0.dll.dll windows x64
2d46269082cb2a6e1e51d202480aff20
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
gdi32
EnumFontFamiliesA
Escape
ExtCreateRegion
FillRgn
GetBkColor
GetRandomRgn
GetGlyphIndicesW
CombineTransform
GetDIBColorTable
ArcTo
BeginPath
DPtoLP
EnumICMProfilesW
uxtheme
BufferedPaintUnInit
GetThemeSysInt
GetThemeInt
shlwapi
StrCatW
StrCpyW
StrCSpnIW
StrPBrkA
msvfw32
DrawDibProfileDisplay
ICImageCompress
ICSendMessage
ICClose
ICOpenFunction
Exports
Exports
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 577KB - Virtual size: 577KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ