Static task
static1
Behavioral task
behavioral1
Sample
a8746fee5ec5f37ad0b018d83b7848d8242f031e67e630db53ea2f54e1e9102e.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a8746fee5ec5f37ad0b018d83b7848d8242f031e67e630db53ea2f54e1e9102e.dll
Resource
win10v2004-20220812-en
General
-
Target
a8746fee5ec5f37ad0b018d83b7848d8242f031e67e630db53ea2f54e1e9102e
-
Size
183KB
-
MD5
1f745f94120ce2fe2e1d896663a2f2e2
-
SHA1
95bcd06909525ac694cec85c1f9cab73d585fb39
-
SHA256
a8746fee5ec5f37ad0b018d83b7848d8242f031e67e630db53ea2f54e1e9102e
-
SHA512
e956ab5838caeac9fbcb5e2003363a137fcd793298a6314c271843af5e5e98e52d4796c0bbf9bb26d56eec45a8ef354ea823b3d96a8321c541f38b19b6aee1db
-
SSDEEP
3072:7FhgWs7SLxGn3RGib5hKT7uVW0egfexWlyK4yOTFO+HLJJedbVTQiJTfZl:7DgbSLxqBGO5qy4gACyZTFOELDqTJr
Malware Config
Signatures
Files
-
a8746fee5ec5f37ad0b018d83b7848d8242f031e67e630db53ea2f54e1e9102e.dll windows x86
f1bfdad0f96100082dbb993298191950
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
RtlInitUnicodeString
ExGetExclusiveWaiterCount
RtlCompareString
MmGetPhysicalAddress
ExAllocatePoolWithTag
SeQueryInformationToken
RtlPrefixUnicodeString
RtlEqualString
IoRemoveShareAccess
KeSetPriorityThread
KeEnterCriticalRegion
RtlInitString
RtlInitializeUnicodePrefix
strcat
ExCreateCallback
PsDereferencePrimaryToken
ExDeletePagedLookasideList
RtlUpperChar
ObQueryNameString
RtlIntegerToUnicodeString
RtlEqualUnicodeString
RtlSecondsSince1970ToTime
RtlFillMemoryUlong
CcSetBcbOwnerPointer
ExFreePool
CcZeroData
ExRaiseAccessViolation
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.itext Size: 1024B - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 788B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ