Static task
static1
Behavioral task
behavioral1
Sample
c71527a2f324f59b60fe70c06ca9c4adfaff756a2d51d7978bbd79a1bcbe50c1.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c71527a2f324f59b60fe70c06ca9c4adfaff756a2d51d7978bbd79a1bcbe50c1.dll
Resource
win10v2004-20220901-en
General
-
Target
c71527a2f324f59b60fe70c06ca9c4adfaff756a2d51d7978bbd79a1bcbe50c1
-
Size
61KB
-
MD5
38ce68d561e557472e1d85395ef15ea3
-
SHA1
58a7ca50749080a19017997655d01b1915c77a94
-
SHA256
c71527a2f324f59b60fe70c06ca9c4adfaff756a2d51d7978bbd79a1bcbe50c1
-
SHA512
bccc65b7a3c318084625eb18316eeb7812d6c9185e8756896069eabe16d5ae08d485a17cda090ea35308bc4dbe4fca127051a4131746430590805c70b5cc62ef
-
SSDEEP
1536:xjnRG3hNNxrBpXuFKl3HjBXIw+wzYVmcsdR:xjnk3hNzXRl3DVIhYYVmcsdR
Malware Config
Signatures
Files
-
c71527a2f324f59b60fe70c06ca9c4adfaff756a2d51d7978bbd79a1bcbe50c1.dll windows x86
1f60d410619334ee129976f70912923c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
hal
HalAcquireDisplayOwnership
KeQueryPerformanceCounter
ntoskrnl.exe
FsRtlIsDbcsInExpression
IoGetAttachedDevice
RtlCompareString
FsRtlIsHpfsDbcsLegal
KeBugCheckEx
ZwCreateSection
RtlEqualString
RtlFindLeastSignificantBit
RtlEqualUnicodeString
IoDetachDevice
RtlInitUnicodeString
RtlCharToInteger
RtlWriteRegistryValue
IoRequestDeviceEject
FsRtlAllocateFileLock
MmPageEntireDriver
ExFreePool
MmSecureVirtualMemory
RtlIntegerToUnicodeString
RtlInitString
MmIsDriverVerifying
RtlFreeAnsiString
KeReleaseSemaphore
ObReferenceObjectByPointer
RtlClearAllBits
IoSetDeviceInterfaceState
RtlUnicodeStringToInteger
Sections
.text Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 74KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 800B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ