Static task
static1
Behavioral task
behavioral1
Sample
9d829ac3568fb7c8a6b55bb8b8790091cacaeea49268071484dcc28a18f49e2c.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9d829ac3568fb7c8a6b55bb8b8790091cacaeea49268071484dcc28a18f49e2c.dll
Resource
win10v2004-20220812-en
General
-
Target
9d829ac3568fb7c8a6b55bb8b8790091cacaeea49268071484dcc28a18f49e2c
-
Size
73KB
-
MD5
6fad4edc890b852c4a593b45276b5b3e
-
SHA1
dc5f323e58d72d19d55296713f60f7aca4b1d2b5
-
SHA256
9d829ac3568fb7c8a6b55bb8b8790091cacaeea49268071484dcc28a18f49e2c
-
SHA512
c99f2c40edacaa6ec58913f3c512e5d549c157b84bbf74774161045f6ef98bd4d607e30aaa717c60da9ccb6681018bcc8328d078f1fad762fa32dbd1463ef8c8
-
SSDEEP
1536:7nJVQ6ywgCvf70N7XxMHbpHuFQR1UEe4Z8E4yqyot1E:ZyV+kXsplUDi8E4yTot1E
Malware Config
Signatures
Files
-
9d829ac3568fb7c8a6b55bb8b8790091cacaeea49268071484dcc28a18f49e2c.dll windows x86
b56ac1de9b2aeeda303895d9edeb68ef
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
RtlInitUnicodeString
RtlEqualString
CcDeferWrite
IoInvalidateDeviceState
RtlInitString
IoCheckQuotaBufferValidity
MmUnmapIoSpace
SeOpenObjectAuditAlarm
strcat
IoCreateSymbolicLink
RtlUpperChar
RtlFindClearBitsAndSet
RtlEqualUnicodeString
ProbeForWrite
RtlIntegerToUnicodeString
FsRtlCheckOplock
RtlCompareString
FsRtlIsFatDbcsLegal
IoGetRequestorProcessId
IoFreeWorkItem
ObQueryNameString
Sections
.text Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.itext Size: 1024B - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 744B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ