Static task
static1
Behavioral task
behavioral1
Sample
033769c921bb1b0bac4a9649304ffed3601b79f9c80ee8e20cf98bf18308fa88.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
033769c921bb1b0bac4a9649304ffed3601b79f9c80ee8e20cf98bf18308fa88.dll
Resource
win10v2004-20220901-en
General
-
Target
033769c921bb1b0bac4a9649304ffed3601b79f9c80ee8e20cf98bf18308fa88
-
Size
61KB
-
MD5
808028b00d7c62fada7113daa28e4480
-
SHA1
5c7ecd96cfb84dc551f988d82e7a00343934bc8a
-
SHA256
033769c921bb1b0bac4a9649304ffed3601b79f9c80ee8e20cf98bf18308fa88
-
SHA512
c340cd40d9e0149452597b78faf0089f9860b6cbb144906653c6dcbe9a5d37ee0f976061ea00e6b35af1044f2ba66c0f7c2d2df22e3333b4b707ed3c71ec8953
-
SSDEEP
1536:wyMhBJj53m8sfe0lQi1IwrAoROOKQPpf4zXwzYVmcsdR:ChrjBh0qsxrIOfpf4zXYYVmcsdR
Malware Config
Signatures
Files
-
033769c921bb1b0bac4a9649304ffed3601b79f9c80ee8e20cf98bf18308fa88.dll windows x86
b3f8cc075a3cff3ceac881441dcc6cba
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
IoCheckShareAccess
RtlInitUnicodeString
RtlInitString
IoFreeController
ZwMapViewOfSection
SeOpenObjectAuditAlarm
RtlFillMemoryUlong
RtlCompareString
RtlHashUnicodeString
ZwEnumerateValueKey
KeLeaveCriticalRegion
MmUnsecureVirtualMemory
PsGetCurrentProcess
ExAcquireResourceSharedLite
KeInitializeDeviceQueue
IoStopTimer
KeSetTimer
RtlEqualString
ZwEnumerateKey
RtlEqualUnicodeString
RtlFindUnicodePrefix
MmAllocateNonCachedMemory
SeQueryInformationToken
MmProbeAndLockPages
_wcsupr
ProbeForRead
ExCreateCallback
CcCopyRead
Sections
.text Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.file Size: 512B - Virtual size: 425B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.type Size: 1024B - Virtual size: 885B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 756B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ