Static task
static1
Behavioral task
behavioral1
Sample
0f82c3ba2a769b9b3aa03db30399c972e1180bf401f4b181091cd32aec58eb42.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
0f82c3ba2a769b9b3aa03db30399c972e1180bf401f4b181091cd32aec58eb42.dll
Resource
win10v2004-20220901-en
General
-
Target
0f82c3ba2a769b9b3aa03db30399c972e1180bf401f4b181091cd32aec58eb42
-
Size
378KB
-
MD5
670c4ab7b65a2fd39c7316d89ecb8e87
-
SHA1
469f8e30751a083da77a678c3797fdb5f7d37fab
-
SHA256
0f82c3ba2a769b9b3aa03db30399c972e1180bf401f4b181091cd32aec58eb42
-
SHA512
eb640d8ae247f413e171e3fff44b0fec2cfd9b067f8af561419e93ce6d33c1e0b1489b6f1f2e97ccc8e865c213f96ce5ea438fa370e414cc3d86214d57561a62
-
SSDEEP
6144:60dL9Yxhvwems++k9kNIzk16ffkurOpbDIgFhXYWXMHJyUooBMpacpVnYrZVxWng:9dL9Wxw+FQ2KJPcniWgdQsyDS
Malware Config
Signatures
Files
-
0f82c3ba2a769b9b3aa03db30399c972e1180bf401f4b181091cd32aec58eb42.dll windows x86
fd40170d51480b4d755ce643292dacc1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
IoConnectInterrupt
IoReportDetectedDevice
KeQueryInterruptTime
CcCopyRead
RtlEqualString
IoDeleteSymbolicLink
RtlIntegerToUnicodeString
KeSetEvent
KeInsertQueue
KeReadStateEvent
IoGetRelatedDeviceObject
strcat
RtlEqualUnicodeString
RtlInitString
RtlInitUnicodeString
RtlInitAnsiString
KeClearEvent
RtlCompareString
RtlUpperChar
FsRtlCheckLockForReadAccess
KeDeregisterBugCheckCallback
RtlMultiByteToUnicodeN
RtlEqualSid
RtlInitializeSid
IoStartNextPacket
Sections
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.itext Size: 1024B - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 632B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ