Static task
static1
Behavioral task
behavioral1
Sample
4d0b375814ab45e2422109007438ee8133b8ea2e9d75661503cc50e583c8b953.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4d0b375814ab45e2422109007438ee8133b8ea2e9d75661503cc50e583c8b953.dll
Resource
win10v2004-20220812-en
General
-
Target
4d0b375814ab45e2422109007438ee8133b8ea2e9d75661503cc50e583c8b953
-
Size
37KB
-
MD5
48e9e53939aece1417352f306f88eaa0
-
SHA1
57feabc3200774874e809a881bd0f8eb2527c503
-
SHA256
4d0b375814ab45e2422109007438ee8133b8ea2e9d75661503cc50e583c8b953
-
SHA512
dbe779b2cdc474eb424e34b25e2961c15a13a89b4eb12141843e50fdcea504c7b35d9a560685dcaf519510b6436f0d1be594fe58e91103a85b821cbfd9bcc5ba
-
SSDEEP
768:P/SI8MASiz2MKvMv/jSupgYEy+MEVTsE++Q02C0B6qDRn/5e24KUV:X58MA1zmg7Lpg/y+MEV3qC0bDRn/xO
Malware Config
Signatures
Files
-
4d0b375814ab45e2422109007438ee8133b8ea2e9d75661503cc50e583c8b953.dll windows x86
a224346e066061bd17e97b2d375f8ebf
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
ZwQueryEaFile
KeLoaderBlock
RtlFillMemoryUlong
_itow
KeFindConfigurationNextEntry
RtlImageNtHeader
KefReleaseSpinLockFromDpcLevel
IoCompleteRequest
MmProbeAndLockProcessPages
IoSynchronousInvalidateDeviceRelations
IoRegisterLastChanceShutdownNotification
IoSynchronousPageWrite
hal
HalSetBusData
HalGetAdapter
KeAcquireSpinLock
HalFreeCommonBuffer
HalProcessorIdle
HalStartProfileInterrupt
HalSetProfileInterval
READ_PORT_ULONG
HalDisplayString
KdComPortInUse
KeReleaseQueuedSpinLock
HalGetEnvironmentVariable
HalSystemVectorDispatchEntry
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 25KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 728B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 14B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ