TTF_WasInit
Static task
static1
Behavioral task
behavioral1
Sample
6a669dd6f06eb21a73be908dd997baa8e3823ea9c484622803e46babc07d0e2f.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
6a669dd6f06eb21a73be908dd997baa8e3823ea9c484622803e46babc07d0e2f.dll
Resource
win10v2004-20221111-en
General
-
Target
6a669dd6f06eb21a73be908dd997baa8e3823ea9c484622803e46babc07d0e2f
-
Size
143KB
-
MD5
fac29a8aa1239a03e00672f94f298155
-
SHA1
bec6b00a3310f3076fd23d19f756b607a6786cf8
-
SHA256
6a669dd6f06eb21a73be908dd997baa8e3823ea9c484622803e46babc07d0e2f
-
SHA512
404f2dc89e0decc58eaf3c4d8db3533975ddf663816fb6bae37441f8f23ae85f330495fd4ced486e520286e79a06bf32cd02b35d98bd611550310aa740c68dbf
-
SSDEEP
3072:zquJYVUAo4xHjriV+NF3Aq6DeGiUMu+MpL6Dpt:zIV+4E+j3r6DpiUtpL6
Malware Config
Signatures
Files
-
6a669dd6f06eb21a73be908dd997baa8e3823ea9c484622803e46babc07d0e2f.dll windows x86
c69191e572a658c4a615615f8679eb7b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
ExitProcess
FindClose
FindResourceA
FlushFileBuffers
FormatMessageA
GetACP
GetCPInfo
GetCommandLineA
GetConsoleMode
GetCurrentProcess
GetDateFormatA
GetEnvironmentStringsW
GetLocaleInfoA
GetModuleHandleA
GetOEMCP
GetStartupInfoA
GlobalAddAtomA
HeapAlloc
HeapCreate
HeapFree
HeapReAlloc
InterlockedDecrement
InterlockedExchange
MultiByteToWideChar
OpenProcess
ReadProcessMemory
RtlUnwind
SetErrorMode
SetLastError
SetUnhandledExceptionFilter
WaitForMultipleObjects
WideCharToMultiByte
lstrcpynA
lstrlenW
msvcrt
__getmainargs
__p__commode
__set_app_type
exit
fwprintf
malloc
sscanf
wcscpy
wcslen
user32
SetWindowTextA
KillTimer
DialogBoxParamA
ole32
CLSIDFromString
CoTaskMemFree
CoCreateInstance
CoCreateGuid
Exports
Exports
Sections
.text Size: 93KB - Virtual size: 228KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ