Static task
static1
Behavioral task
behavioral1
Sample
67c0053c079832595cd2d0fb58af5a5d.dll
Resource
win7-20220901-en
General
-
Target
67c0053c079832595cd2d0fb58af5a5d.dll
-
Size
504KB
-
MD5
67c0053c079832595cd2d0fb58af5a5d
-
SHA1
84757b3a6386bc1eca6c19caef07991ea1d0c36e
-
SHA256
de685eb59c78a137082733327fe52b89fcd4b0378671bbd9aabab177696da62c
-
SHA512
fe7d8e311b9d06252fc3665da954e8cae8b2a1708b772a490fe6001833dca61070b9869893d502d4286afcb5f15a59e087c3bca8f4fe1a3dbe964f0949046bc9
-
SSDEEP
6144:YEZjSPANWjOuuPdo4JrNOiduRVBVSjcdZ0nPjlv7o3Yo7490BszloJ5ICZO/+:vdlJOkuRVfa48Lljo3YoE90Co5dL
Malware Config
Signatures
Files
-
67c0053c079832595cd2d0fb58af5a5d.dll.dll windows x86
f6f50e027a4c4acd49d92eaf66f7a1de
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscms
GetStandardColorSpaceProfileW
gdi32
GetPixelFormat
FillPath
GetStockObject
GetMetaFileA
GetTextColor
GetPolyFillMode
GetTextExtentExPointI
GetTextExtentExPointW
GetCharacterPlacementW
GetFontUnicodeRanges
GdiSetBatchLimit
GetPath
GetDIBColorTable
DeleteColorSpace
secur32
DecryptMessage
FreeContextBuffer
wininet
GetUrlCacheEntryInfoExA
kernel32
GetConsoleTitleA
GetCurrentDirectoryA
EnumSystemLocalesW
EnumSystemGeoID
GetProfileStringW
GetVolumePathNamesForVolumeNameW
DefineDosDeviceA
WriteProfileStringW
EnumTimeFormatsA
GetTapeStatus
DeleteTimerQueueTimer
GetSystemTime
VirtualQueryEx
GetUserDefaultLangID
VirtualFree
GetTapePosition
GetStringTypeW
FindFirstFileW
GlobalLock
FindResourceExA
GetComputerNameW
EnumResourceNamesW
GetTimeFormatA
GetSystemTimeAsFileTime
GetConsoleMode
lstrlenA
GetExitCodeProcess
IsValidCodePage
GetSystemDefaultLangID
GetCurrentThreadId
GetModuleFileNameW
GetBinaryTypeW
ExitThread
lstrcmpiW
VirtualFreeEx
VirtualProtectEx
GetTempPathA
GetSystemPowerStatus
GetFileAttributesExW
ws2_32
shutdown
winspool.drv
DeletePrinter
FindFirstPrinterChangeNotification
msvcrt
memset
_time64
strtol
strtoul
fputws
strcspn
strspn
tolower
strcmp
comdlg32
GetSaveFileNameA
GetSaveFileNameW
user32
DrawIcon
FindWindowW
GetKeyNameTextW
InsertMenuA
FlashWindow
LoadKeyboardLayoutA
LoadIconA
GetUserObjectInformationW
GetWindowInfo
GetClipboardSequenceNumber
ModifyMenuA
GetUpdateRect
GetClassInfoA
GetClassInfoExA
GetWindowRect
GetWindowTextW
GetMenuStringW
GetProcessDefaultLayout
GetPropW
DefMDIChildProcW
DefWindowProcA
LoadMenuW
LoadCursorW
EnumWindowStationsW
GetWindowTextA
oleaut32
GetErrorInfo
version
GetFileVersionInfoSizeA
advapi32
IsValidAcl
GetServiceDisplayNameW
RegOpenKeyA
GetOldestEventLogRecord
GetFileSecurityW
LookupPrivilegeNameW
GetServiceKeyNameA
GetSidIdentifierAuthority
LookupAccountSidW
GetLengthSid
shell32
ExtractAssociatedIconExW
ExtractAssociatedIconA
powrprof
IsPwrHibernateAllowed
urlmon
IsValidURL
Sections
.text Size: 92KB - Virtual size: 89KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 264KB - Virtual size: 260KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.erloc Size: 108KB - Virtual size: 107KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ