Static task
static1
Behavioral task
behavioral1
Sample
4dab8e4f6ce52a35f8b31b8013837ce94af8f7858ebc8e6d9ccaf14542840b74.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4dab8e4f6ce52a35f8b31b8013837ce94af8f7858ebc8e6d9ccaf14542840b74.dll
Resource
win10v2004-20220812-en
General
-
Target
4dab8e4f6ce52a35f8b31b8013837ce94af8f7858ebc8e6d9ccaf14542840b74
-
Size
72KB
-
MD5
664e81cf9d825ba9ca3d08e5d942189b
-
SHA1
b0c12333fa9c04ac880e5d886dc640b7eeb07f21
-
SHA256
4dab8e4f6ce52a35f8b31b8013837ce94af8f7858ebc8e6d9ccaf14542840b74
-
SHA512
3e1fcada3af6571a472866e6d16722cedc1dd735ed6c4e9e78c5b159b2529e384e119063867ff682ff512d46751b75bb1a097199e36e33df459006c411f5fc13
-
SSDEEP
1536:6q/7dyokWxLWJoMRWrjMkpVk3QFcjfuQURd7By1Km8fiWM:627CWhWJoMyjMkppcjlo1m8f6
Malware Config
Signatures
Files
-
4dab8e4f6ce52a35f8b31b8013837ce94af8f7858ebc8e6d9ccaf14542840b74.dll windows x86
4c08173aeb2309db8d5dc6414d7b7ef1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
ExInterlockedPushEntryList
IoFreeWorkItem
RtlCopyUnicodeString
ZwSetSecurityObject
Ke386IoSetAccessProcess
hal
HalProcessorIdle
KeRaiseIrql
IoFreeAdapterChannel
HalTranslateBusAddress
KeGetCurrentIrql
IoMapTransfer
Sections
.data Size: - Virtual size: 84KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 366B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ