Static task
static1
Behavioral task
behavioral1
Sample
ceb909ba8f98e64d6847a42aeea35c88efdcb22b5edb78f0ed4349ed33b8f4b2.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ceb909ba8f98e64d6847a42aeea35c88efdcb22b5edb78f0ed4349ed33b8f4b2.dll
Resource
win10v2004-20220812-en
General
-
Target
ceb909ba8f98e64d6847a42aeea35c88efdcb22b5edb78f0ed4349ed33b8f4b2
-
Size
379KB
-
MD5
2ab060c842c9060af9da8832723660fa
-
SHA1
5a7768934a7a702ed753fbe0fdaba8cff33c8373
-
SHA256
ceb909ba8f98e64d6847a42aeea35c88efdcb22b5edb78f0ed4349ed33b8f4b2
-
SHA512
a19395b46bdadf12e168aaa902b5aba64a487b49bd26eb96c9a351e044695f714db1fa326567ec3749467cc8971f38f86676225c5ed2ad3713fc69f03c7f3269
-
SSDEEP
6144:jNgfAhzQ2mbEvfJLaFvft7sBGnXjxAXmxCx2LYW2Tz0tfT+zSyrBwsQXF4MbshSb:jNgfAhzUK0RQTzXA1KlwD3MjfP/y
Malware Config
Signatures
Files
-
ceb909ba8f98e64d6847a42aeea35c88efdcb22b5edb78f0ed4349ed33b8f4b2.dll windows x86
96efcc324fae6e1c6e61340e6a36e99d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
KeUnstackDetachProcess
MmPageEntireDriver
KeInitializeSpinLock
_wcsupr
RtlGUIDFromString
RtlCompareString
KeDelayExecutionThread
RtlInitUnicodeString
PsTerminateSystemThread
FsRtlFastUnlockSingle
RtlSecondsSince1970ToTime
FsRtlIsTotalDeviceFailure
RtlHashUnicodeString
IoSetSystemPartition
IoInitializeTimer
RtlEqualUnicodeString
RtlInitString
IoStartTimer
IoCheckShareAccess
FsRtlMdlWriteCompleteDev
RtlEqualString
Sections
.text Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.file Size: 512B - Virtual size: 360B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.type Size: 1024B - Virtual size: 659B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 616B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ