Static task
static1
Behavioral task
behavioral1
Sample
f75ce04aa82f4d54d1f5784fe4f01880f1c6dc54afdfeb408f6d5afb79f42470.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f75ce04aa82f4d54d1f5784fe4f01880f1c6dc54afdfeb408f6d5afb79f42470.dll
Resource
win10v2004-20220812-en
General
-
Target
f75ce04aa82f4d54d1f5784fe4f01880f1c6dc54afdfeb408f6d5afb79f42470
-
Size
70KB
-
MD5
404ae7485a84078723732e03c3d1e013
-
SHA1
fea833a983fd5be7a165d9556f51733b98f7c84b
-
SHA256
f75ce04aa82f4d54d1f5784fe4f01880f1c6dc54afdfeb408f6d5afb79f42470
-
SHA512
cfd0e02b5a1c880c17965f9e4a66ecd89cfa7e7c95d4185e21c798c11a2a51279224907bd91560e5282e5dab8ceb744ace90ad70f621de3c2428a5e21068aef2
-
SSDEEP
768:5xenoY9hp8LUTSSw4sCBlhdEI/iprnEg6DZjAzN6nUx2QaCuTbByr2LcRh9V:GL9hp8LUTfkC3Tzq1Et6IkaXByaQ/r
Malware Config
Signatures
Files
-
f75ce04aa82f4d54d1f5784fe4f01880f1c6dc54afdfeb408f6d5afb79f42470.dll windows x86
6c3f40b8db1f4a19358aed0edb0ad119
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
RtlUpperChar
RtlDeleteRegistryValue
RtlCharToInteger
IoFreeIrp
RtlInitString
strcat
MmQuerySystemSize
ObGetObjectSecurity
RtlFillMemoryUlong
KeInitializeMutex
IoRaiseHardError
RtlEqualUnicodeString
RtlInitUnicodeString
RtlCompareString
RtlClearBits
RtlAddAccessAllowedAceEx
RtlEqualString
RtlFindNextForwardRunClear
ObReleaseObjectSecurity
RtlIntegerToUnicodeString
KeQueryInterruptTime
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.itext Size: 1024B - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 768B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ