Static task
static1
Behavioral task
behavioral1
Sample
installer_gzlng.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
installer_gzlng.dll
Resource
win10v2004-20220812-en
General
-
Target
Setup_64.zip
-
Size
1.3MB
-
MD5
f78ee0295ba098144ccbb10266bd0b50
-
SHA1
7f53f516dfd737ee0f629ae846a8356997d31847
-
SHA256
67488bf07ad89e779b0bdfb98cbd3743225369c4dc49c8f10d88deae0a6f7ab6
-
SHA512
65023d6eb857a7d22c36709e8f2b95ba5a1a652ff688c15ee3a441c5b54fb1ee2f1b2503d97cb43c3276988db6acccaa563d33cdffb41c47135af223a5e91b23
-
SSDEEP
24576:szqa3gIviBzLo2LujqgAeu2LJjWIUvPqhFaubk+64a50jZTvWMRK2Hrh7Q:sz9D6BXoeujqwu29KLv60L+6nopvLdLe
Malware Config
Signatures
Files
-
Setup_64.zip.zip
-
Setup_64/sfx_123_414.zip.zip
-
installer_gzlng.cpl.dll windows x86
a6dfebaeb5c2ca88548c67cdf38009da
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
MkParseDisplayName
winspool.drv
FindNextPrinterChangeNotification
gdi32
GetCharacterPlacementW
GetTextExtentPoint32A
GetWindowOrgEx
GetRgnBox
SetBkMode
kernel32
WaitForSingleObjectEx
GetStringTypeA
GetModuleHandleA
GenerateConsoleCtrlEvent
GetBinaryTypeW
CommConfigDialogW
GetVolumePathNamesForVolumeNameW
FindResourceW
FileTimeToDosDateTime
FillConsoleOutputCharacterA
FlushFileBuffers
FindNextFileA
EnumSystemCodePagesA
GetTempPathA
GetCommTimeouts
FindFirstFileA
lstrcpyW
GetSystemDefaultUILanguage
GetModuleFileNameW
GetProcessWorkingSetSize
IsValidCodePage
IsValidLanguageGroup
user32
DefWindowProcW
DestroyIcon
GetDlgItemInt
CreateIconIndirect
GetTitleBarInfo
IsWindowVisible
GetTabbedTextExtentW
GetRawInputData
DestroyWindow
EnumWindowStationsA
winmm
DefDriverProc
msvcrt
fputs
malloc
ws2_32
shutdown
Sections
.text Size: 264KB - Virtual size: 260KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 148KB - Virtual size: 149KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 904B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 64KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.jo Size: 256.7MB - Virtual size: 256.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
-
Setup_64/z.txt