Static task
static1
Behavioral task
behavioral1
Sample
adeb2f9381069605a235609dffd49c545c5c7147ce9b34b71eefb88c1cc79d06.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
adeb2f9381069605a235609dffd49c545c5c7147ce9b34b71eefb88c1cc79d06.dll
Resource
win10v2004-20220812-en
General
-
Target
adeb2f9381069605a235609dffd49c545c5c7147ce9b34b71eefb88c1cc79d06
-
Size
89KB
-
MD5
8151eb2e850270574193c515d39467a0
-
SHA1
ee266a245f486a9977dcf6d645fb458b4a9f6ba8
-
SHA256
adeb2f9381069605a235609dffd49c545c5c7147ce9b34b71eefb88c1cc79d06
-
SHA512
e2f6076d4b97898abf349613e831343c992f937a529484f2be2400c799a29d459b26e2f6f2cf192aa85153170d60426155f1efa82dc496435e0bad2cfd609362
-
SSDEEP
1536:4m8k1NM1UqnNrkWSk4oN4/bZLvPusOu7SxyyzpG7LwSNrXfuYqLXnRt1P4xQ/CG0:4m8k1WnBkWStoidvPusF7YHg7hXfuxLY
Malware Config
Signatures
Files
-
adeb2f9381069605a235609dffd49c545c5c7147ce9b34b71eefb88c1cc79d06.dll windows x86
9dc167d36be457de1d3f4a9453b6871d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
IoGetDmaAdapter
RtlInitString
RtlGUIDFromString
KeInitializeDeviceQueue
RtlFindUnicodePrefix
RtlEqualString
IoCheckQuotaBufferValidity
RtlCopyString
RtlUpperChar
RtlEqualUnicodeString
MmUnmapIoSpace
RtlHashUnicodeString
RtlCompareString
RtlInitUnicodeString
RtlFreeAnsiString
IoInitializeIrp
KeWaitForMultipleObjects
RtlIntegerToUnicodeString
IoCreateStreamFileObjectLite
ExFreePoolWithTag
MmMapLockedPagesSpecifyCache
RtlNtStatusToDosError
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.itext Size: 1024B - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 752B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ