DRMHelplink
Static task
static1
Behavioral task
behavioral1
Sample
c2edc28b69a6ee8c5b5bbded11881f409a06001888fe437e5c14de9559c6dcbb.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c2edc28b69a6ee8c5b5bbded11881f409a06001888fe437e5c14de9559c6dcbb.dll
Resource
win10v2004-20220901-en
General
-
Target
c2edc28b69a6ee8c5b5bbded11881f409a06001888fe437e5c14de9559c6dcbb
-
Size
80KB
-
MD5
5a68d0e18fa2d3d36d8e6121e4ccb59a
-
SHA1
d2ea6c25523bfa7676659a7e82a6f59e8e7eea59
-
SHA256
c2edc28b69a6ee8c5b5bbded11881f409a06001888fe437e5c14de9559c6dcbb
-
SHA512
d409145411b64d2120f638e8614a5cb4dd21d85e3510cd541f6828a931895a9d88aa833b3d53211832fff371e6070219ae63034b8e01fc0b05a6b103936a2084
-
SSDEEP
1536:Uz1kR1dVK71R/Rfshfe+t9uoZw66IGieruxbr:t13g5fcNbuoZ6IGN6xr
Malware Config
Signatures
Files
-
c2edc28b69a6ee8c5b5bbded11881f409a06001888fe437e5c14de9559c6dcbb.dll windows x86
92266caa8e10c2d4ccb6dd0746d19da7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileA
ReleaseMutex
GetProcAddress
GetSystemDirectoryA
LeaveCriticalSection
LoadLibraryA
HeapAlloc
InterlockedDecrement
InitializeCriticalSectionAndSpinCount
InterlockedExchange
CreateFileMappingA
EnterCriticalSection
GetProcessHeap
GetSystemTimeAsFileTime
GetLastError
GetVolumeInformationA
CreateMutexA
MapViewOfFile
GetCurrentDirectoryW
LocalFlags
PulseEvent
OpenFile
QueryPerformanceFrequency
GlobalHandle
CreateMailslotW
ActivateActCtx
GetSystemWow64DirectoryW
SetCommState
IsDBCSLeadByteEx
CopyFileExW
GetCommandLineW
GetStdHandle
GetFileAttributesW
SetCurrentDirectoryW
OpenEventA
SetCurrentDirectoryA
GetVolumePathNamesForVolumeNameW
MoveFileA
GetCommTimeouts
CallNamedPipeA
PeekConsoleInputA
FatalAppExitA
VerifyVersionInfoA
SetErrorMode
GetSystemDefaultUILanguage
GetSystemPowerStatus
EnumResourceNamesA
BindIoCompletionCallback
SetFileAttributesA
user32
InvalidateRgn
OpenWindowStationW
SetActiveWindow
EqualRect
CreateIcon
IsMenu
AppendMenuA
ShowWindowAsync
SetSysColors
PostThreadMessageA
GetIconInfo
GetProcessWindowStation
DefFrameProcA
EndPaint
TrackMouseEvent
GetInputState
GetMonitorInfoA
CopyIcon
MessageBoxA
GetSysColor
CharToOemW
OpenWindowStationA
GetMessageTime
SetScrollInfo
WinHelpA
GetDlgItemTextA
GetWindowRect
CreateDialogIndirectParamW
LoadStringW
CallMsgFilterW
SetDlgItemTextA
CheckRadioButton
EnableMenuItem
LoadMenuW
GetCursor
TabbedTextOutW
RedrawWindow
IsCharAlphaA
CharPrevA
DrawAnimatedRects
DefWindowProcW
GetMenuStringW
IsChild
CopyAcceleratorTableA
wvsprintfA
CheckMenuRadioItem
DefWindowProcA
PostMessageA
GetClassNameA
DispatchMessageA
RegisterWindowMessageA
SetWindowsHookExA
UnhookWindowsHookEx
GetMessageA
oleaut32
SysAllocStringLen
SysAllocStringByteLen
shell32
SHSetLocalizedName
ShellExecuteExA
ShellExecuteExW
SHFormatDrive
SHGetFolderLocation
SHCreateShellItem
Exports
Exports
Sections
.text Size: 60KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ