Static task
static1
Behavioral task
behavioral1
Sample
4b0c480e1c7b71e5238ab7b4e5e6bb860a7c671618833199ce490fa4a23d135c.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4b0c480e1c7b71e5238ab7b4e5e6bb860a7c671618833199ce490fa4a23d135c.dll
Resource
win10v2004-20220901-en
General
-
Target
4b0c480e1c7b71e5238ab7b4e5e6bb860a7c671618833199ce490fa4a23d135c
-
Size
73KB
-
MD5
5e5209396c37957e9be9a20103db606b
-
SHA1
32d0619cacf0484f35100b35058889bcfcc4745b
-
SHA256
4b0c480e1c7b71e5238ab7b4e5e6bb860a7c671618833199ce490fa4a23d135c
-
SHA512
4c95f9bf86ee5317deccf48c787d044257e2a9f60a5370f7939e46aef60d977890d8ff16dd6dcdad295445d7bb6eb4716370fd047cbe34d659837c0ae16fd4b5
-
SSDEEP
1536:Frm4jQ66HFAvGFb7e+MkAWQ0NoYhobUo9+v95TrA2UEe4Z8E4yqyot1E:tm0yGm+gAWQ+hHokF5Y2UDi8E4yTot1E
Malware Config
Signatures
Files
-
4b0c480e1c7b71e5238ab7b4e5e6bb860a7c671618833199ce490fa4a23d135c.dll windows x86
0f54cdfbd44244da534afc21bd2df4d6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
MmFreeContiguousMemory
RtlUpperString
IoStopTimer
MmGetPhysicalAddress
RtlIntegerToUnicodeString
strcat
RtlInitUnicodeString
RtlInitString
RtlCompareString
RtlUpperChar
KeRestoreFloatingPointState
RtlNumberOfClearBits
RtlEqualString
RtlGetVersion
ExRaiseStatus
RtlEqualUnicodeString
SeSinglePrivilegeCheck
KeDeregisterBugCheckCallback
ExUuidCreate
IoInvalidateDeviceState
Sections
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.itext Size: 1024B - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 736B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ