GetCDInfo
Static task
static1
Behavioral task
behavioral1
Sample
22fbca30279447375834899a1b1972fd468f46a6bc1e78a52f08817d8aa92954.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
22fbca30279447375834899a1b1972fd468f46a6bc1e78a52f08817d8aa92954.dll
Resource
win10v2004-20220812-en
General
-
Target
22fbca30279447375834899a1b1972fd468f46a6bc1e78a52f08817d8aa92954
-
Size
216KB
-
MD5
42816208900eb3bccf316ddfd96c8081
-
SHA1
1f2183ba57c8bccb34588961827964acabe9da8c
-
SHA256
22fbca30279447375834899a1b1972fd468f46a6bc1e78a52f08817d8aa92954
-
SHA512
f9348d20da5fad5fd243d8ad96799b8569afe9d2f6d9da60b9ec5e76b9d18ec9014c7bbd0454ccef992f37ba9ff5b0f5d21402794e9212b864aeab72715b3d6c
-
SSDEEP
3072:DVKuLGj4GITFa0Dy1GS3oT3IMzsF6auxzUERaDIqIXrPmxg:hcV0QAb8O1zscXUma
Malware Config
Signatures
Files
-
22fbca30279447375834899a1b1972fd468f46a6bc1e78a52f08817d8aa92954.dll windows x86
76a9f28f2db201ab0ee48b7baa6366b2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileMappingA
ExitProcess
ExitThread
FileTimeToSystemTime
FindClose
GetACP
GetCommandLineA
GetCurrentProcess
GetFileAttributesA
GetLocaleInfoW
GetModuleHandleA
GetStringTypeA
GetSystemTimeAsFileTime
GetThreadContext
GetTimeFormatA
GetVersionExA
GlobalMemoryStatus
GlobalReAlloc
HeapAlloc
HeapCreate
HeapFree
InitializeCriticalSection
InterlockedIncrement
MulDiv
OutputDebugStringA
RtlUnwind
SetEndOfFile
SetErrorMode
TerminateProcess
TlsGetValue
TlsSetValue
WriteFile
lstrcatA
lstrcmpiA
lstrcpyA
lstrcpynA
advapi32
AddAuditAccessAceEx
CryptDuplicateKey
IsWellKnownSid
LsaEnumerateTrustedDomainsEx
LsaLookupSids
LsaQuerySecurityObject
AccessCheckByType
user32
OpenClipboard
RemoveMenu
IsWindowVisible
SetUserObjectSecurity
GetSubMenu
GetDlgItem
GetSysColor
SetDlgItemTextA
GetCursorPos
FindWindowExA
DrawFrameControl
DeleteMenu
IntersectRect
ole32
CoCreateInstance
IsEqualGUID
CreateAntiMoniker
ddraw
GetSurfaceFromDC
DirectDrawEnumerateW
DirectDrawEnumerateA
DirectDrawCreateEx
Exports
Exports
Sections
.text Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 92KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ