Static task
static1
Behavioral task
behavioral1
Sample
46fa2306c62a7d63b2a6e7bf8ac9dce5e7c6c9549039205879201d4b41899adc.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
46fa2306c62a7d63b2a6e7bf8ac9dce5e7c6c9549039205879201d4b41899adc.dll
Resource
win10v2004-20220901-en
General
-
Target
46fa2306c62a7d63b2a6e7bf8ac9dce5e7c6c9549039205879201d4b41899adc
-
Size
81KB
-
MD5
6cca3897a686159a72b8e3507a11383b
-
SHA1
918a6125fa95ce8776b0c98d1904dca066cf142c
-
SHA256
46fa2306c62a7d63b2a6e7bf8ac9dce5e7c6c9549039205879201d4b41899adc
-
SHA512
90bf6eea6119568dc9e88f44cfb7392511b72da825d04e569353a425c22d7492f40d63ed5e308bf95a4c730b61eb72081a240c14e8b6e8cc6d966c45e302e908
-
SSDEEP
1536:JrtcJJ0OMOuzmvvYn7S7jOldV9Jn0fPe2gQnR7hB45gwbEREXjt:JQOOM1S8SGlhJn0HVgc7A5toRAt
Malware Config
Signatures
Files
-
46fa2306c62a7d63b2a6e7bf8ac9dce5e7c6c9549039205879201d4b41899adc.dll windows x86
0020b46cf5c42b1e6d026e7992a68dfa
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
KeSetPriorityThread
RtlInitUnicodeString
ZwAllocateVirtualMemory
RtlPrefixUnicodeString
IoReportResourceForDetection
strncpy
RtlEqualString
RtlInitString
ExRaiseStatus
IoAllocateWorkItem
IoStartPacket
ExUuidCreate
KeCancelTimer
RtlEqualUnicodeString
KeInitializeMutex
KeInitializeTimerEx
RtlIntegerToUnicodeString
ZwQueryKey
PsTerminateSystemThread
RtlCompareString
Sections
.text Size: 25KB - Virtual size: 89KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 812B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ