Static task
static1
Behavioral task
behavioral1
Sample
f838e7f3dfd2e61051497e245703c161013d273906b40e834e432fd4680c72e3.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f838e7f3dfd2e61051497e245703c161013d273906b40e834e432fd4680c72e3.dll
Resource
win10v2004-20220812-en
General
-
Target
f838e7f3dfd2e61051497e245703c161013d273906b40e834e432fd4680c72e3
-
Size
135KB
-
MD5
582a083ded49a0d3b7a564c82fbc8d69
-
SHA1
83061a9b155c75e266609c161dace445edee4648
-
SHA256
f838e7f3dfd2e61051497e245703c161013d273906b40e834e432fd4680c72e3
-
SHA512
011ba2a2f235696ef5580874224c4d8dfe6e9fe22a326226996ddd1f976378023a2c7daad97cfe58c690c002b8bd0a634f1981f183053cd174a3354974362e4d
-
SSDEEP
3072:Y67jqEF0InMcInj8xlGYd0ct0j24z3pGNBFKXU3Wao:rKldnj8yY+ch4z3wFKX
Malware Config
Signatures
Files
-
f838e7f3dfd2e61051497e245703c161013d273906b40e834e432fd4680c72e3.dll windows x86
4a3af0955d99ddfedae4b972c2e819e0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
ZwFreeVirtualMemory
RtlEqualString
RtlEqualUnicodeString
IoConnectInterrupt
RtlCompareString
CcDeferWrite
CcRemapBcb
RtlAnsiStringToUnicodeString
RtlSetDaclSecurityDescriptor
RtlInitString
RtlLengthRequiredSid
RtlAreBitsSet
IoWriteErrorLogEntry
RtlInitUnicodeString
RtlNtStatusToDosError
RtlUpperChar
strcat
FsRtlGetNextFileLock
ZwOpenProcess
RtlIntegerToUnicodeString
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.itext Size: 1024B - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 760B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ