Static task
static1
Behavioral task
behavioral1
Sample
5d021927706ee1f84fdc4e9486b41dcc99246b6d8b1dae39af6407a183be28b5.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5d021927706ee1f84fdc4e9486b41dcc99246b6d8b1dae39af6407a183be28b5.dll
Resource
win10v2004-20220812-en
General
-
Target
5d021927706ee1f84fdc4e9486b41dcc99246b6d8b1dae39af6407a183be28b5
-
Size
64KB
-
MD5
816b656dcaa3b70fbcce9388eb1a9799
-
SHA1
8b5486aa8c7bbf69b52a1e24eea1c1fc7aae84dc
-
SHA256
5d021927706ee1f84fdc4e9486b41dcc99246b6d8b1dae39af6407a183be28b5
-
SHA512
dcf31aa51b4f5ae4b52300318477e6a79cad9d2ee346ee63b2e18eddade2beeabfe7450c2bb81e8d5a653d24acb50c7bb8e1de2c283eb02704791ec893360921
-
SSDEEP
1536:xMaonaXfnxgqJGkiZKpC0w2MPW5I9EO5KMvOWg0QqS:Srn0JgbZYI0WPWtXWg0Qq
Malware Config
Signatures
Files
-
5d021927706ee1f84fdc4e9486b41dcc99246b6d8b1dae39af6407a183be28b5.dll windows x86
9c87ccc5b21f3b52445d25af125402f8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
RtlxAnsiStringToUnicodeSize
RtlInitUnicodeString
RtlEqualString
ObReleaseObjectSecurity
IoMakeAssociatedIrp
RtlHashUnicodeString
CcDeferWrite
RtlClearBits
RtlInitAnsiString
RtlInitString
IoRemoveShareAccess
KeStackAttachProcess
IoWriteErrorLogEntry
RtlEqualUnicodeString
ZwEnumerateValueKey
MmMapLockedPagesSpecifyCache
RtlCheckRegistryKey
ExFreePoolWithTag
ProbeForWrite
Sections
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.itext Size: 512B - Virtual size: 80B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.code Size: 512B - Virtual size: 192B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.icode Size: 512B - Virtual size: 192B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fdata Size: 1024B - Virtual size: 596B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ