Static task
static1
Behavioral task
behavioral1
Sample
f2e3a5d46b15116a4d7b022debfc2667588167600ea420fafbd386da4b103749.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f2e3a5d46b15116a4d7b022debfc2667588167600ea420fafbd386da4b103749.dll
Resource
win10v2004-20220812-en
General
-
Target
f2e3a5d46b15116a4d7b022debfc2667588167600ea420fafbd386da4b103749
-
Size
83KB
-
MD5
668a9972abb23e18aa67018aa39ae40c
-
SHA1
0f799b3c33af794275a3fe7ffae54755c7f812e3
-
SHA256
f2e3a5d46b15116a4d7b022debfc2667588167600ea420fafbd386da4b103749
-
SHA512
a141e37d92e7241251a2c7fe95f88416aaafbfad40969f4e8df69866c04d765e44a4483d18659b532789b74be0cce2b6920b251ffd276491f864149f0d232707
-
SSDEEP
1536:YzxuRB1A1p98dmb6kMOiygbYxyhsFJVW1MES+:POtgAiygkzFzW2ES
Malware Config
Signatures
Files
-
f2e3a5d46b15116a4d7b022debfc2667588167600ea420fafbd386da4b103749.dll windows x86
806f9f0f6c479517b1f7c2cdcde9191c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
LdrFindResourceDirectory_U
DbgPrintReturnControlC
KeIsExecutingDpc
IoRegisterLastChanceShutdownNotification
ZwYieldExecution
KeFindConfigurationEntry
hal
IoReadPartitionTable
WRITE_PORT_USHORT
ExAcquireFastMutex
WRITE_PORT_BUFFER_UCHAR
HalFreeCommonBuffer
HalHandleNMI
READ_PORT_BUFFER_UCHAR
HalTranslateBusAddress
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 69KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 728B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 90B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ