Static task
static1
Behavioral task
behavioral1
Sample
566dab6eccb783eab422d1e05da9b3ffb8e08ce120042459975a62fb00ec94df.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
566dab6eccb783eab422d1e05da9b3ffb8e08ce120042459975a62fb00ec94df.dll
Resource
win10v2004-20220901-en
General
-
Target
566dab6eccb783eab422d1e05da9b3ffb8e08ce120042459975a62fb00ec94df
-
Size
61KB
-
MD5
19591edf2de8d32a03feac25c39e2349
-
SHA1
2d58777670a015ddbde92c08aec6ecb6a01eed27
-
SHA256
566dab6eccb783eab422d1e05da9b3ffb8e08ce120042459975a62fb00ec94df
-
SHA512
efa065c74c9de596cd8473b0b62637bb4590c4a9c2b8fb20554e189c5a0b9a5a739f7b6726a6a3f8a32f507345b3247ba161303d96cb431a8fe238ffe4777b26
-
SSDEEP
1536:Pj3jAF8S9a9hRaVF6RogMCfmADx9W48FYPGbfYnHiwzYVmcsdR:b3jY9aLRU8RPz+OK482P8wnCYYVmcsdR
Malware Config
Signatures
Files
-
566dab6eccb783eab422d1e05da9b3ffb8e08ce120042459975a62fb00ec94df.dll windows x86
08ae28bf931b809bd093da34715394f6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
IoStartNextPacket
RtlIntegerToUnicodeString
IoDeleteController
IoSetDeviceInterfaceState
ZwOpenSymbolicLinkObject
KeInitializeSpinLock
ExGetPreviousMode
RtlGetVersion
RtlInitString
IoDisconnectInterrupt
RtlVerifyVersionInfo
PoUnregisterSystemState
RtlDowncaseUnicodeString
RtlFindLastBackwardRunClear
IoGetDeviceProperty
RtlCharToInteger
MmMapIoSpace
RtlCompareString
IoConnectInterrupt
RtlInitUnicodeString
RtlEqualString
RtlEqualUnicodeString
IoReuseIrp
IoStartPacket
IoCreateFile
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.itext Size: 1024B - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 872B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ