Static task
static1
Behavioral task
behavioral1
Sample
software_fhwcj.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
software_fhwcj.dll
Resource
win10v2004-20220901-en
Errors
General
-
Target
software_fhwcj.cpl
-
Size
257.7MB
-
MD5
d76a010d5fbb126a4638fba7db864b4d
-
SHA1
b306b466bc47a5da9bd0d15a5faf143ec4223a37
-
SHA256
28b3e2807ab3349beb2997e3555e0c98774976aa9de0473f6e38e792d2d96307
-
SHA512
99963161ead720d4f882e1246ae77aedf9d20b3a1466bf958e788318b0ecc17b17502835dc3f5db618bd23f2fd12d5966d48a044aad272ba1cb31c4fe11a8033
-
SSDEEP
24576:t4aK19GpdPDCCLUoyl7eMmswi3CLcXsCMrblH/3O1:t419ObfQl7eJ4C+sCGb1a
Malware Config
Signatures
Files
-
software_fhwcj.cpl.dll windows x86
8532ed930ac42ebb838f68cb17796a49
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DefDlgProcW
GetWindowTextLengthA
LoadIconW
GetSystemMenu
DrawTextExA
GetMessageExtraInfo
GetDC
GetScrollPos
RegisterClassExA
MessageBoxW
GetKeyboardLayoutNameW
FlashWindow
GetMenuItemRect
GetClassLongA
msvcrt
fputws
kernel32
GetAtomNameA
IsProcessorFeaturePresent
FileTimeToSystemTime
GetModuleHandleA
GetBinaryTypeA
OutputDebugStringA
SetPriorityClass
GetModuleFileNameA
GetConsoleTitleW
FindVolumeClose
GetCurrencyFormatA
DeleteCriticalSection
GetSystemTimeAsFileTime
EnterCriticalSection
LeaveCriticalSection
GetEnvironmentVariableW
advapi32
GetServiceKeyNameW
IsWellKnownSid
SetEntriesInAclA
gdi32
GetCharacterPlacementW
GetLayout
GetRegionData
GetTextFaceW
LineTo
mscms
GetColorDirectoryW
oleaut32
LoadTypeLi
SetErrorInfo
Sections
.text Size: 104KB - Virtual size: 101KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 816KB - Virtual size: 812KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 124KB - Virtual size: 122KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 904B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 40KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.xu Size: 256.6MB - Virtual size: 256.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ