DriverInit
Static task
static1
Behavioral task
behavioral1
Sample
002f0d01455d2e4f872408e6f42693a411182ab4e8b93b964bcd60d847eaa8b3.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
002f0d01455d2e4f872408e6f42693a411182ab4e8b93b964bcd60d847eaa8b3.dll
Resource
win10v2004-20220812-en
General
-
Target
002f0d01455d2e4f872408e6f42693a411182ab4e8b93b964bcd60d847eaa8b3
-
Size
235KB
-
MD5
46ac7b2d017b4b596c73f0f9a67de114
-
SHA1
e57accf2639cd886501cee51ba2d0cc434f9ae75
-
SHA256
002f0d01455d2e4f872408e6f42693a411182ab4e8b93b964bcd60d847eaa8b3
-
SHA512
2a1fadb03b844fe5e4e23e9bff55ecfc5f42df16126bd323079ef66d0de48d53fe6d76b34b4f242c9b6d1ac365b362a35b7c67cdb8a56790595078b81a410650
-
SSDEEP
6144:5p1QDgeeNMPaZRupn+aZGVXpEqI2JX6gAy/Awp:mmEc8B+XLEqIeX6gAy/Z
Malware Config
Signatures
Files
-
002f0d01455d2e4f872408e6f42693a411182ab4e8b93b964bcd60d847eaa8b3.dll windows x86
4bc2243830c75a9bd54a42d263727a83
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetClipBox
kernel32
ResumeThread
SetThreadPriority
CreateThread
GetCurrentProcessId
CloseHandle
IsBadReadPtr
WaitForSingleObject
SetPriorityClass
Sleep
GetCurrentThreadId
MapSLFix
MapSL
GetProfileIntA
HeapAlloc
DisableThreadLibraryCalls
HeapFree
HeapReAlloc
HeapCreate
HeapDestroy
GetCurrentProcess
GetPriorityClass
HeapSize
user32
KillTimer
EqualRect
ClientToScreen
GetClientRect
SetTimer
GetDC
ReleaseDC
InvalidateRect
ddraw
DDHAL32_VidMemFree
DDHAL32_VidMemAlloc
winmm
timeGetTime
Exports
Exports
Sections
.text Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 72B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 964B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 998B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 195KB - Virtual size: 196KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE