Static task
static1
Behavioral task
behavioral1
Sample
0e342176a44a346ef638c6f85e36c755128900b3f7740e1d05bbbf9b0c496653.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
0e342176a44a346ef638c6f85e36c755128900b3f7740e1d05bbbf9b0c496653.dll
Resource
win10v2004-20220901-en
General
-
Target
0e342176a44a346ef638c6f85e36c755128900b3f7740e1d05bbbf9b0c496653
-
Size
219KB
-
MD5
67a344c8387e55318ca8b44f96dd7160
-
SHA1
4b82b9146f85f641b5f027eb778b5121f1642336
-
SHA256
0e342176a44a346ef638c6f85e36c755128900b3f7740e1d05bbbf9b0c496653
-
SHA512
d956ce3a6ff94bcc5d0ecea9b412028cc4db1df324b6b1dab84c4a54bd5ca676fddd5f9222cdf993c0b1933dec5f42682ef11e50aae8c7317962bd1a23eb0db4
-
SSDEEP
6144:OC38q7Cv2gjP5zk+nzuhJxqRZmOWsQmMqT:OgC+gjPuuuhJYOkQml
Malware Config
Signatures
Files
-
0e342176a44a346ef638c6f85e36c755128900b3f7740e1d05bbbf9b0c496653.dll windows x86
329da56f9d10ae29ea729728ad453ac0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
ord64
ord147
ExtractAssociatedIconExA
SHEnumerateUnreadMailAccountsW
glu32
gluTessBeginContour
gluNextContour
gluTessProperty
opengl32
glEvalPoint2
glTexCoord3d
glColor3fv
msvcrt
exit
_time64
isxdigit
islower
toupper
_mbctoupper
isspace
sprintf
wcschr
strchr
shlwapi
PathRemoveBlanksW
IsCharSpaceA
PathMakeSystemFolderW
PathRemoveFileSpecW
PathMakePrettyW
PathFileExistsW
comctl32
ImageList_GetImageCount
CreateStatusWindowW
ord6
kernel32
GetProcAddress
GetConsoleOutputCP
GetStartupInfoW
GlobalCompact
SetFileApisToOEM
SetProcessWorkingSetSize
GetSystemTime
DefineDosDeviceW
user32
ValidateRect
FindWindowW
TranslateMDISysAccel
DestroyIcon
IsWindowVisible
EnableMenuItem
CloseDesktop
LoadImageW
DdeAccessData
IsCharUpperA
gdi32
RoundRect
SetRectRgn
PolyBezier
comdlg32
ChooseFontA
PrintDlgW
Sections
.text Size: 152KB - Virtual size: 151KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ