Static task
static1
Behavioral task
behavioral1
Sample
98fffbfb0c569c7d8a125963d5192188771eb391f551c0026b6cee7a95da8e2e.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
98fffbfb0c569c7d8a125963d5192188771eb391f551c0026b6cee7a95da8e2e.dll
Resource
win10v2004-20220901-en
General
-
Target
98fffbfb0c569c7d8a125963d5192188771eb391f551c0026b6cee7a95da8e2e
-
Size
73KB
-
MD5
42205bac6fc76642a55efa0baf2b46da
-
SHA1
e43c463ea4590a830a5cd37bc05015a0ffb55bc5
-
SHA256
98fffbfb0c569c7d8a125963d5192188771eb391f551c0026b6cee7a95da8e2e
-
SHA512
dc71d9471120e42a1895ac52dacd637602004811c5d4f72a6eac19e532432034b080b3a97efe57b0fa4bbdaa52e83f14cc18eecac7f7e9a570d65dc91db9c88c
-
SSDEEP
1536:IVmeYvl843q5vam6oYIBhBEr+RCBmoqQsDTrhvOFRbT58m3n/:3tl8NtrhBE6YqNDT9wRfpn/
Malware Config
Signatures
Files
-
98fffbfb0c569c7d8a125963d5192188771eb391f551c0026b6cee7a95da8e2e.dll windows x86
3d56242a96fb25cb71971886b614f47a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
FsRtlInitializeMcb
_aullrem
KeRevertToUserAffinityThread
KeGetCurrentThread
ExReleaseResourceLite
IoAcquireCancelSpinLock
LsaCallAuthenticationPackage
hal
HalStartProfileInterrupt
HalSetTimeIncrement
KeGetCurrentIrql
HalReadDmaCounter
HalAllocateCommonBuffer
HalReportResourceUsage
HalRequestIpi
KeRaiseIrqlToSynchLevel
IoFreeAdapterChannel
HalStopProfileInterrupt
HalHandleNMI
ExAcquireFastMutex
READ_PORT_BUFFER_UCHAR
Sections
.data Size: - Virtual size: 88KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 625B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ