Static task
static1
Behavioral task
behavioral1
Sample
42bc2cfb70cf65407326f8d071570a5af5db1e02e733574cec654326e83b5112.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
42bc2cfb70cf65407326f8d071570a5af5db1e02e733574cec654326e83b5112.dll
Resource
win10v2004-20220812-en
General
-
Target
42bc2cfb70cf65407326f8d071570a5af5db1e02e733574cec654326e83b5112
-
Size
73KB
-
MD5
243bafd785cda76977dded951f05e476
-
SHA1
cf09e8a671e9d878e0fa5d67aa84210ff043b29c
-
SHA256
42bc2cfb70cf65407326f8d071570a5af5db1e02e733574cec654326e83b5112
-
SHA512
119e0f20b886148fd8d2bfa19f7a020e520f23a52e6d41e71e75cdfcef2ea1962fa08ccee6a57d8b29c452362cc5547e644efc8d56b255f51a3042823f53e85c
-
SSDEEP
1536:gotL03+3FJj8PjDVWCxX9UUEe4Z8E4yqyot1E:9L03+3Pj8PjDVWSCUDi8E4yTot1E
Malware Config
Signatures
Files
-
42bc2cfb70cf65407326f8d071570a5af5db1e02e733574cec654326e83b5112.dll windows x86
f5499a84cd0e5427a42173634db6b81f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
RtlCompareString
strncpy
IoRemoveShareAccess
IoConnectInterrupt
KeInitializeTimerEx
RtlIntegerToUnicodeString
KeInitializeEvent
ZwEnumerateKey
ZwOpenSymbolicLinkObject
KeInitializeDeviceQueue
IoStopTimer
FsRtlIsDbcsInExpression
FsRtlDeregisterUncProvider
RtlEqualString
RtlEqualUnicodeString
RtlInitUnicodeString
KeCancelTimer
FsRtlCheckLockForReadAccess
RtlFindLongestRunClear
PoSetPowerState
RtlCharToInteger
RtlInitString
CcUnpinDataForThread
RtlSecondsSince1980ToTime
IoStartPacket
Sections
.text Size: 24KB - Virtual size: 87KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 748B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ