Static task
static1
Behavioral task
behavioral1
Sample
2f6d0907220b4d14501b818abb07196c77a876f1061457166ab6be0b209b2244.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2f6d0907220b4d14501b818abb07196c77a876f1061457166ab6be0b209b2244.dll
Resource
win10v2004-20220901-en
General
-
Target
2f6d0907220b4d14501b818abb07196c77a876f1061457166ab6be0b209b2244
-
Size
56KB
-
MD5
6d60aa82c624b69c75d5cc6780bcc6e9
-
SHA1
be5217b29529ad8dcf802fb185d98d5121f3bdd7
-
SHA256
2f6d0907220b4d14501b818abb07196c77a876f1061457166ab6be0b209b2244
-
SHA512
47359433789b718d84b414e99870c3b34217be4e693d7465a5f693555f5b0d33863e41e2563db32203104b2a5ad9cef988ea6e11e86dcfe0e8b426d9be11b06f
-
SSDEEP
1536:XVthrfuOZdksb2gII75k/30qKlANOzFGCyLbTWb6j:XVtB7nDb25B/E9lAYFG3i6
Malware Config
Signatures
Files
-
2f6d0907220b4d14501b818abb07196c77a876f1061457166ab6be0b209b2244.dll windows x86
ba5b89eb6d608d8cd8056e7051ccac26
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
hal
HalAcquireDisplayOwnership
KeQueryPerformanceCounter
ntoskrnl.exe
RtlCharToInteger
MmUnmapLockedPages
KeInsertDeviceQueue
RtlMapGenericMask
RtlInitUnicodeString
ExFreePool
KeInsertHeadQueue
RtlIntegerToUnicodeString
IoConnectInterrupt
RtlGUIDFromString
PsGetCurrentThreadId
KeSetTimer
IoAllocateErrorLogEntry
RtlEqualString
ExDeleteNPagedLookasideList
ExSetResourceOwnerPointer
RtlCompareString
SeOpenObjectAuditAlarm
ExAcquireFastMutexUnsafe
RtlInitString
RtlEqualUnicodeString
RtlCheckRegistryKey
Sections
.text Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 74KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 720B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ