ncuw
Static task
static1
Behavioral task
behavioral1
Sample
dc31d3634c9cde342485ac3655ae82251ccc82a8e14730dfa80278a6f74ff40d.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
dc31d3634c9cde342485ac3655ae82251ccc82a8e14730dfa80278a6f74ff40d.dll
Resource
win10v2004-20220901-en
General
-
Target
dc31d3634c9cde342485ac3655ae82251ccc82a8e14730dfa80278a6f74ff40d
-
Size
48KB
-
MD5
66f81d395cd4276cbb7669bd3c6c9973
-
SHA1
f4006c1e416115d6b8e212e6eefb2a868071b6aa
-
SHA256
dc31d3634c9cde342485ac3655ae82251ccc82a8e14730dfa80278a6f74ff40d
-
SHA512
facc10d9c1cb09f8da74b59130b5d9c25c5d939a226791dbb5a9ad0500cd32e56c9eeb47bb64af0c72c1339031d8f6712c863f8ac3ebdab8b39eda1d60f59614
-
SSDEEP
768:KAE4XN0akLWmmQ82N90hsdLPgHBKL917SoW6gNO5SGcWe1Gjil17e3u97I/4+Y:KAE4XhT52H0hkLPghiga5RrFWa3o7Ik
Malware Config
Signatures
Files
-
dc31d3634c9cde342485ac3655ae82251ccc82a8e14730dfa80278a6f74ff40d.dll windows x86
05cced6abdd6846eb2b5e7f4160fa3be
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileW
HeapFree
GetProcessHeap
HeapAlloc
Beep
ddraw
DirectDrawCreateClipper
DirectDrawEnumerateW
DirectDrawEnumerateA
DirectDrawCreateEx
DirectDrawEnumerateExW
DirectDrawCreate
DirectDrawEnumerateExA
glu32
gluUnProject
gluQuadricOrientation
gluQuadricDrawStyle
gluNurbsCallback
gluLookAt
gluProject
gluQuadricTexture
gluPartialDisk
gluEndTrim
gluLoadSamplingMatrices
gluPickMatrix
gluDeleteTess
gluScaleImage
gluTessEndPolygon
gluNewNurbsRenderer
gluNurbsProperty
gluEndSurface
gluTessNormal
gluGetTessProperty
gluQuadricNormals
gluNextContour
gluBeginSurface
gluNurbsSurface
gluEndCurve
gluNewQuadric
Exports
Exports
Sections
.code_01 Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 113KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 912B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 654B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ