Static task
static1
Behavioral task
behavioral1
Sample
fdd9c8d9a0dddb352573fb6cb8a379fb56e28761bac9fc9848c87adfe9822f75.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fdd9c8d9a0dddb352573fb6cb8a379fb56e28761bac9fc9848c87adfe9822f75.dll
Resource
win10v2004-20220812-en
General
-
Target
fdd9c8d9a0dddb352573fb6cb8a379fb56e28761bac9fc9848c87adfe9822f75
-
Size
331KB
-
MD5
846e1cc95befa5d7728a7ba99c6df2a0
-
SHA1
86d65a2e17932de1b95f7b5e82384a99f8378975
-
SHA256
fdd9c8d9a0dddb352573fb6cb8a379fb56e28761bac9fc9848c87adfe9822f75
-
SHA512
f37dd2f49854324a546d1ddebc0fabc07c5ce915fe3b3d24f0fca3bd0eecd0c8557c98473887219e2235251671e76c23c519c2926cb65b07bd7dde660d78f0fe
-
SSDEEP
6144:kmLGmeWQ+VgPCuLj5la/n/jtglEoa4vHg+u83lyn1q+/jst8KHfjIckkQYdWihhL:JVZg6u3a6lZa4fg+e1q+/4ttHfjIc7Qk
Malware Config
Signatures
Files
-
fdd9c8d9a0dddb352573fb6cb8a379fb56e28761bac9fc9848c87adfe9822f75.dll windows x86
0f54cdfbd44244da534afc21bd2df4d6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
MmFreeContiguousMemory
RtlUpperString
IoStopTimer
MmGetPhysicalAddress
RtlIntegerToUnicodeString
strcat
RtlInitUnicodeString
RtlInitString
RtlCompareString
RtlUpperChar
KeRestoreFloatingPointState
RtlNumberOfClearBits
RtlEqualString
RtlGetVersion
ExRaiseStatus
RtlEqualUnicodeString
SeSinglePrivilegeCheck
KeDeregisterBugCheckCallback
ExUuidCreate
IoInvalidateDeviceState
Sections
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.itext Size: 1024B - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 736B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ