Static task
static1
Behavioral task
behavioral1
Sample
3e2a738ac6fe05f5bfebbddb69812dd260c23d679b8dc09c64413df2128acee6.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
3e2a738ac6fe05f5bfebbddb69812dd260c23d679b8dc09c64413df2128acee6.dll
Resource
win10v2004-20220812-en
General
-
Target
3e2a738ac6fe05f5bfebbddb69812dd260c23d679b8dc09c64413df2128acee6
-
Size
73KB
-
MD5
3677f24c58a5cc78121c052aff8145ca
-
SHA1
11f9f6f0900cae32d6af42e1c1202db38fb8e9ef
-
SHA256
3e2a738ac6fe05f5bfebbddb69812dd260c23d679b8dc09c64413df2128acee6
-
SHA512
ca6dfd9f922078520654ab18220742724b2f4e96897878b8dc981149d6515a9fd2ae9d53cceb29ceded7f9f5a38987abb32fc8cc20af212511e1b31298d8197d
-
SSDEEP
1536:oKHc+X8Ib2gIIrcDKlJkbyT7BXH4qnHUEe4Z8E4yqyot1E:oh+XZb25LmlJFT7VH4qnHUDi8E4yTotS
Malware Config
Signatures
Files
-
3e2a738ac6fe05f5bfebbddb69812dd260c23d679b8dc09c64413df2128acee6.dll windows x86
0be2e8b05d5bb02f122e9a8a533ba040
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
RtlInitUnicodeString
RtlEqualString
IoAttachDeviceToDeviceStack
RtlCopySid
KeReadStateEvent
KeRemoveDeviceQueue
SeAssignSecurity
FsRtlFastUnlockSingle
PsTerminateSystemThread
RtlWriteRegistryValue
IoGetCurrentProcess
IoReportDetectedDevice
IoGetDeviceInterfaceAlias
RtlInitString
ZwAllocateVirtualMemory
KeInitializeSemaphore
RtlCharToInteger
RtlEqualUnicodeString
KeInitializeQueue
KdEnableDebugger
KeSetTimerEx
ZwDeleteValueKey
RtlIntegerToUnicodeString
RtlUpcaseUnicodeChar
RtlCompareString
RtlAreBitsSet
IoStartTimer
MmGetPhysicalAddress
hal
HalAcquireDisplayOwnership
KeQueryPerformanceCounter
Sections
.text Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 74KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 788B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ