Static task
static1
Behavioral task
behavioral1
Sample
jdfggo.dll
Resource
win7-20220414-en
General
-
Target
jdfggo.rar
-
Size
328KB
-
MD5
6e6533fa01c0c32dac8c1cab8dc73dbc
-
SHA1
44c67e51fbeb6b0c8bc26cf7d21223403cac4215
-
SHA256
14cf7f5e94dba384b0e31ad0917b6825b9f9791625059cc8b3c0db43931c9cc9
-
SHA512
270bdf93dbd36c946fbc45020619c3ed31d46e659c7ff9d8cb28d9d713a30bb78e7d3d2fed4069a5420ecbea61d4cbeff44bd7d0b6afb6caeb43fb5ff12c8a24
-
SSDEEP
6144:fUVQdB7ab5FaBYA3JBaUH/kOyQ1SDofgEcwY1KEcyk1emcwQ3oj:fU+veb5FaP1HTyQ14ugjXKjveF
Malware Config
Signatures
Files
-
jdfggo.rar.dll windows x86
a9dcba22e49d69dd17ae0f6b7ed41420
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
oleaut32
GetRecordInfoFromTypeInfo
user32
GetFocus
kernel32
GetModuleHandleA
GetModuleHandleW
crypt32
CryptInstallOIDFunctionAddress
advapi32
RegCloseKey
Sections
.text Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 180KB - Virtual size: 179KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt1 Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt2 Size: 60KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 228B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ