Static task
static1
Behavioral task
behavioral1
Sample
8cac32e4f9f839e382ece0406a7297b8f3756d62a6449c87c50859268c340010.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8cac32e4f9f839e382ece0406a7297b8f3756d62a6449c87c50859268c340010.dll
Resource
win10v2004-20220812-en
General
-
Target
8cac32e4f9f839e382ece0406a7297b8f3756d62a6449c87c50859268c340010
-
Size
65KB
-
MD5
81345e93edb5fd6c8b0ba01c55fcaa07
-
SHA1
142a65ac5ae6b2d9fd9a21ef45c4a9cfed5b4f70
-
SHA256
8cac32e4f9f839e382ece0406a7297b8f3756d62a6449c87c50859268c340010
-
SHA512
c1e5aafb14e2845dd81d6e8dd93cab6d169126bf95fe5740a7a934f9020b9c8acd3c45ddc3d69a01be4be91fcf7eacc63f2790ad019ad655e5f0184715f58a94
-
SSDEEP
1536:E60Fm/nG3gf6F6RogMCfHqCKHEXEHP1vLbYAg:E6amff68RPzCCHEHPRbYB
Malware Config
Signatures
Files
-
8cac32e4f9f839e382ece0406a7297b8f3756d62a6449c87c50859268c340010.dll windows x86
c07ea05a39e77638d4ac07003de78f48
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
KeLeaveCriticalRegion
IoAllocateMdl
ZwQueryKey
MmAllocateContiguousMemory
RtlCompareString
RtlEqualString
ExNotifyCallback
RtlInitString
MmFreeContiguousMemory
IoRegisterDeviceInterface
IoInvalidateDeviceState
RtlCharToInteger
RtlFreeAnsiString
RtlEqualUnicodeString
RtlIntegerToUnicodeString
IoConnectInterrupt
ZwQueryVolumeInformationFile
MmSecureVirtualMemory
KeInitializeTimer
IoStartTimer
RtlFindUnicodePrefix
ObReferenceObjectByPointer
PoSetPowerState
RtlInitUnicodeString
Sections
.text Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.itext Size: 1024B - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 828B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ