cloj
Static task
static1
Behavioral task
behavioral1
Sample
3e0040d8608370ccdddb8558f79fd350da8fc74ef865f85e0762750efdd7ea19.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3e0040d8608370ccdddb8558f79fd350da8fc74ef865f85e0762750efdd7ea19.dll
Resource
win10v2004-20221111-en
General
-
Target
3e0040d8608370ccdddb8558f79fd350da8fc74ef865f85e0762750efdd7ea19
-
Size
88KB
-
MD5
d2cb35a7f03a4129ca6898bf77fcc3e1
-
SHA1
6f23f348aea1ba090e1147b1883c4f8cdd68528d
-
SHA256
3e0040d8608370ccdddb8558f79fd350da8fc74ef865f85e0762750efdd7ea19
-
SHA512
1f48d2dcce028974008eeafa3a2151700f368f6830e6771ff29617cbade003a2a9ddbb5e74ce7f43693e3ff5c9b1c23884577f37f5693cc18b123d43a70e52d7
-
SSDEEP
1536:X6txP8vQ2LYviFJQS//ZdNfW/KUkK9upd/EhH1HMSVcf6D:X8avQ2LY03ZdhW/KUk9pVq1HMoco
Malware Config
Signatures
Files
-
3e0040d8608370ccdddb8558f79fd350da8fc74ef865f85e0762750efdd7ea19.dll windows x86
5fc144c5f64577ddfbe07c09ddbbc205
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemTime
IsValidLocale
GetProcAddress
GetModuleHandleA
GetHandleInformation
LoadLibraryA
GetVersion
VirtualAlloc
gdi32
CreateRectRgnIndirect
SetStretchBltMode
GetObjectW
DeleteObject
ExtTextOutW
PatBlt
GetBitmapBits
MoveToEx
LPtoDP
GetPaletteEntries
SetViewportExtEx
CombineRgn
GetTextAlign
RectVisible
SetWindowOrgEx
GetMapMode
GetClipBox
Escape
GetDIBits
DeleteMetaFile
GetClipRgn
SetTextAlign
CreateFontIndirectW
CreateFontIndirectA
CreateBitmap
CreateHalftonePalette
GetNearestColor
SetBkMode
CreateFontA
TextOutW
SetTextColor
CreateCompatibleDC
GetObjectType
GetSystemPaletteEntries
SetMapMode
GetTextMetricsA
GetViewportExtEx
SetROP2
RealizePalette
GetCurrentObject
OffsetViewportOrgEx
ExtSelectClipRgn
SelectObject
GetTextExtentPoint32W
GetBkColor
Rectangle
GetTextExtentPoint32A
GetWindowExtEx
SetBrushOrgEx
winspool.drv
DeletePrinterDataA
DeletePrinterDriverA
StartDocPrinterA
GetPrinterA
msvcrt
printf
_onexit
__dllonexit
_adjust_fdiv
ftell
fread
sprintf
memset
fclose
fopen
_unlink
fwrite
fseek
free
_initterm
malloc
Exports
Exports
Sections
.text Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 52KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ