Static task
static1
Behavioral task
behavioral1
Sample
42a020cfe699f15d1c73f5f473caa673d36cdd1d32d967232a93c768a23f4621.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
42a020cfe699f15d1c73f5f473caa673d36cdd1d32d967232a93c768a23f4621.dll
Resource
win10v2004-20220901-en
General
-
Target
42a020cfe699f15d1c73f5f473caa673d36cdd1d32d967232a93c768a23f4621
-
Size
158KB
-
MD5
67c3370ad93917e707dc64be8857308d
-
SHA1
2046c75ff867d8d9a5683d88216e333b213a34b5
-
SHA256
42a020cfe699f15d1c73f5f473caa673d36cdd1d32d967232a93c768a23f4621
-
SHA512
6324ad8bbf52f26b3e579ca6920aace45daf5aac74c0bd364dbb42b0593ae51421cb1dacf5e459ed480c5842a96edc403bda5da0bdf02f35baa98e7e15d23199
-
SSDEEP
3072:chYp1FkbBkw0WEBenWofXDtL+wRz7qZ1UmPIn1R9FzRySZv:cepsb/0WEEWC5iwRO1Un1R9FzRj
Malware Config
Signatures
Files
-
42a020cfe699f15d1c73f5f473caa673d36cdd1d32d967232a93c768a23f4621.dll windows x86
a6db81ed16e57ae785b333768410646b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadFile
VirtualAlloc
gdi32
CreateCompatibleDC
CreateFontIndirectW
CreatePen
CreatePolygonRgn
CreateSolidBrush
DeleteDC
DeleteObject
Ellipse
EnableEUDC
EnumFontFamiliesW
ExtTextOutA
ExtTextOutW
FillRgn
GetBitmapBits
CreateCompatibleBitmap
GetObjectW
GetRgnBox
GetStockObject
GetTextExtentExPointW
GetTextExtentPoint32A
GetTextExtentPoint32W
GetTextExtentPointW
GetTextMetricsW
OffsetRgn
CreateBitmap
Rectangle
SelectObject
SetBitmapBits
SetBkColor
SetTextColor
StretchBlt
TranslateCharsetInfo
BitBlt
GetFontData
PatBlt
comdlg32
ChooseFontW
GetSaveFileNameW
GetOpenFileNameW
advapi32
RegOpenKeyExW
shell32
ShellAboutW
imm32
ImmSetConversionStatus
ImmSetCompositionStringW
ImmRegisterWordW
ImmIsIME
ImmAssociateContext
ImmConfigureIMEW
ImmCreateContext
ImmDestroyContext
ImmEnumRegisterWordW
ImmEscapeW
ImmGetCompositionStringW
ImmGetConversionStatus
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 127KB - Virtual size: 127KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.f444445 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.f444444 Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 726B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ