Static task
static1
Behavioral task
behavioral1
Sample
1c86f9783b2ec6f4648b0c691f19e0ab20eb87d41014f4cf79b9e9a1f0ff7e8a.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1c86f9783b2ec6f4648b0c691f19e0ab20eb87d41014f4cf79b9e9a1f0ff7e8a.dll
Resource
win10v2004-20220901-en
General
-
Target
1c86f9783b2ec6f4648b0c691f19e0ab20eb87d41014f4cf79b9e9a1f0ff7e8a
-
Size
81KB
-
MD5
214c81f8a7729978bd1f1b175d4331db
-
SHA1
6f73ff492886063928a66f9f86fc93930bc89b58
-
SHA256
1c86f9783b2ec6f4648b0c691f19e0ab20eb87d41014f4cf79b9e9a1f0ff7e8a
-
SHA512
aa6088591a690de5c653485267a77b280b82c90e264bc9744fadbf23c729ced3d91986c787c3bc396c969fe101445b7ede3de46502b2a9b1b2a1c789c80b737e
-
SSDEEP
1536:dOwc1TU6BuWC3o5kMxhf/o/XK61XM4ImL9mQJQD:gwIUgC3o5ke1/oC61Xws4qQ
Malware Config
Signatures
Files
-
1c86f9783b2ec6f4648b0c691f19e0ab20eb87d41014f4cf79b9e9a1f0ff7e8a.dll windows x86
a765ddf8219aceb62d6aeab9ad2da791
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
MmSizeOfMdl
RtlInitString
_wcsupr
RtlEqualString
RtlAddAccessAllowedAceEx
IoRequestDeviceEject
RtlMultiByteToUnicodeN
IoBuildPartialMdl
RtlEqualSid
RtlEqualUnicodeString
KeReleaseMutex
RtlInitUnicodeString
RtlCompareString
KeInitializeTimerEx
RtlFindSetBits
RtlUpperChar
RtlHashUnicodeString
Sections
.text Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.file Size: 512B - Virtual size: 320B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 6KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.type Size: 1024B - Virtual size: 990B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 708B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ