Static task
static1
Behavioral task
behavioral1
Sample
66009d50aa585425e60e9025294231c8476151dec635f118c9c6fce47a1425b7.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
66009d50aa585425e60e9025294231c8476151dec635f118c9c6fce47a1425b7.dll
Resource
win10v2004-20220901-en
General
-
Target
66009d50aa585425e60e9025294231c8476151dec635f118c9c6fce47a1425b7
-
Size
70KB
-
MD5
68d8f91dadebbbc41039090bc0e9fb34
-
SHA1
d605723bc7396c4201e3ea17e904bc79aa19e43d
-
SHA256
66009d50aa585425e60e9025294231c8476151dec635f118c9c6fce47a1425b7
-
SHA512
7a5cad6b5e2809684d5374aea8ee25c13091acd77c2113038066876eb637f1d016569fde152fe2676c2c6b3123512a8bc0b0e041477fc4dc72e161e797e12f1b
-
SSDEEP
1536:HB6vkjd7IVd9hakF6RogMCfPeEqT8EXE4HlCN5hG2KIL9J:h60xYdLl8RPznITVE4FC1R
Malware Config
Signatures
Files
-
66009d50aa585425e60e9025294231c8476151dec635f118c9c6fce47a1425b7.dll windows x86
66adf15e9b2db8bce75674ce4516b866
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
RtlLengthSecurityDescriptor
RtlGUIDFromString
RtlEqualUnicodeString
IoReportResourceForDetection
KeCancelTimer
KeInitializeTimerEx
FsRtlCheckLockForReadAccess
RtlInitUnicodeString
KeUnstackDetachProcess
RtlEqualString
IoUpdateShareAccess
RtlDeleteRegistryValue
SeDeassignSecurity
RtlInitString
IoMakeAssociatedIrp
RtlCompareString
MmFreeNonCachedMemory
RtlIntegerToUnicodeString
MmFreePagesFromMdl
MmLockPagableSectionByHandle
RtlCharToInteger
IoRegisterDeviceInterface
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.itext Size: 1024B - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 920B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ