Static task
static1
Behavioral task
behavioral1
Sample
30fe30db5e1837d31254caab965e83cf917744408d9c7b4d1ac7402ccf6264d0.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
30fe30db5e1837d31254caab965e83cf917744408d9c7b4d1ac7402ccf6264d0.dll
Resource
win10v2004-20220901-en
General
-
Target
30fe30db5e1837d31254caab965e83cf917744408d9c7b4d1ac7402ccf6264d0
-
Size
271KB
-
MD5
0d068c73aa776cd55e4a69e0b0d2f730
-
SHA1
b06c8a9c35e86d94e9c81a8cebb351cf527e394d
-
SHA256
30fe30db5e1837d31254caab965e83cf917744408d9c7b4d1ac7402ccf6264d0
-
SHA512
353c63f091af59d16e9064b3f27e9c0758adaf50bcfa3cb95f6e769cc3df3020eb9f7b8599686f830763e0d1669f54a1707365b0a09c2152488ad3e6207b4ce2
-
SSDEEP
6144:eUI7MOdT8N1COW6EifAnMCNPzoXKGmv0LLUi6r+K5:esN1C36r6MCZoXXUGK5
Malware Config
Signatures
Files
-
30fe30db5e1837d31254caab965e83cf917744408d9c7b4d1ac7402ccf6264d0.dll windows x86
3414c76b58e9790b4f36cf5e1cd9cf45
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetMetaRgn
GetStockObject
GetObjectType
GdiEntry8
AbortDoc
CreateDiscardableBitmap
GetBitmapBits
GdiEntry12
GetEnhMetaFilePaletteEntries
GetBoundsRect
GetTextExtentExPointW
RoundRect
CheckColorsInGamut
SetFontEnumeration
CreateICA
GetTextExtentPointA
kernel32
FileTimeToLocalFileTime
GetConsoleAliasesLengthA
GetTickCount
GetPrivateProfileIntW
GetConsoleInputExeNameW
ExitProcess
GetNamedPipeInfo
_hwrite
ContinueDebugEvent
GetConsoleAliasW
EndUpdateResourceW
GetPrivateProfileSectionA
GlobalFlags
VirtualAlloc
CompareFileTime
OpenSemaphoreA
GetLocaleInfoW
lstrcmpiA
RegisterConsoleVDM
WriteConsoleInputVDMW
ole32
CoInitializeWOW
CreateAntiMoniker
OpenOrCreateStream
OleCreateDefaultHandler
ReadFmtUserTypeStg
CoRevokeMallocSpy
CoSwitchCallContext
OleCreateFromFileEx
OleCreateFromDataEx
CoCreateInstance
IIDFromString
GetHGlobalFromILockBytes
OleCreateMenuDescriptor
EnableHookObject
HMETAFILE_UserMarshal
OleFlushClipboard
WriteFmtUserTypeStg
StgOpenStorageOnILockBytes
CoMarshalInterface
CoUninitialize
WdtpInterfacePointer_UserFree
SNB_UserUnmarshal
CoReleaseMarshalData
CreateStreamOnHGlobal
CoFreeLibrary
OleSetContainedObject
oleaut32
VarI1FromDisp
VarUI4FromR4
VarUI1FromDisp
VarI1FromI4
VarDateFromI4
SafeArrayCopy
VARIANT_UserMarshal
VarR4FromUI4
GetErrorInfo
VarR4FromI2
OleSavePictureFile
VarI1FromUI2
VarBstrFromUI1
VarCyFromDate
VarCyFromUI4
SafeArrayGetDim
SafeArrayGetElemsize
VarI1FromR8
VarDecFromBool
VarUI2FromI2
SetErrorInfo
LPSAFEARRAY_Size
VarI2FromBool
VarI2FromCy
SafeArrayCreate
SysStringLen
VarBoolFromI2
VariantTimeToDosDateTime
VarI4FromR4
SafeArrayRedim
VarI1FromDec
VarUI1FromBool
VarI2FromUI1
VarBoolFromR8
VarR4FromUI1
SafeArrayUnlock
VarUI1FromI2
VarDateFromR4
RegisterActiveObject
VariantInit
LPSAFEARRAY_UserUnmarshal
VarR4FromUI4
VarCyFromStr
VarCyFromDec
VarDateFromUdate
OleIconToCursor
VarCyFromR8
VarCyFromUI1
SafeArrayCreate
VarUI4FromDisp
VarBstrFromR8
VarUI1FromStr
VariantClear
VarDateFromI2
SafeArrayPutElement
DispGetIDsOfNames
CreateStdDispatch
VarDateFromUI4
VarI2FromBool
VarI1FromBool
VarBstrFromDec
VarCyFromUI2
BSTR_UserSize
VarBstrFromCy
VarDateFromUI2
VarR8FromI4
OleLoadPictureFile
DllGetClassObject
VarDateFromI4
VarI1FromUI4
VarI1FromI4
VarI2FromR8
SafeArrayUnlock
SafeArrayAccessData
VariantInit
LPSAFEARRAY_Marshal
SysStringByteLen
Sections
.text Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 242KB - Virtual size: 668KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ