Static task
static1
Behavioral task
behavioral1
Sample
689b3339516237d7e141f54990c01326f6c08e461dc2f152fbc1132b87ae3bfb.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
689b3339516237d7e141f54990c01326f6c08e461dc2f152fbc1132b87ae3bfb.dll
Resource
win10v2004-20220812-en
General
-
Target
689b3339516237d7e141f54990c01326f6c08e461dc2f152fbc1132b87ae3bfb
-
Size
71KB
-
MD5
33630a7c948a01f4e85cb67c86a6754e
-
SHA1
1ec266d2b1f4eee2482963b80dbaa237ebf3a700
-
SHA256
689b3339516237d7e141f54990c01326f6c08e461dc2f152fbc1132b87ae3bfb
-
SHA512
82f494756475c3de26a8620725049476a3379034958bb021061c4b451cd11a551c8b17566888bacef4743e6f83e74bcadcdcea754d8a13323f524dd320969778
-
SSDEEP
1536:Flb54nxbXOpBBbFSn1BEBig/X/QLnpCgqHirWIlWaJzSCs:enxbXOpBBb8n1BEt/vQVdlKcS
Malware Config
Signatures
Files
-
689b3339516237d7e141f54990c01326f6c08e461dc2f152fbc1132b87ae3bfb.dll windows x86
abdb1f00e99efdf3e14ff5dc58f5da93
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
_wcsupr
IoGetStackLimits
IoGetAttachedDeviceReference
RtlAppendUnicodeStringToString
PoSetHiberRange
NtQueryEaFile
strcat
ZwOpenProcess
CcFastReadWait
IoPnPDeliverServicePowerNotification
ZwQueryEaFile
CcFastMdlReadWait
Sections
.data Size: - Virtual size: 88KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 67KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 349B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ