Static task
static1
Behavioral task
behavioral1
Sample
d9c4d0f2bca2eef8798e2f531decaa2370a7bef17a8bf37e77a25c6cfbb255cc.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d9c4d0f2bca2eef8798e2f531decaa2370a7bef17a8bf37e77a25c6cfbb255cc.dll
Resource
win10v2004-20220812-en
General
-
Target
d9c4d0f2bca2eef8798e2f531decaa2370a7bef17a8bf37e77a25c6cfbb255cc
-
Size
183KB
-
MD5
52b417456cffc4072053f8ff1244e2ab
-
SHA1
59570f97d41567b06d6e490f9c572571deeabf5f
-
SHA256
d9c4d0f2bca2eef8798e2f531decaa2370a7bef17a8bf37e77a25c6cfbb255cc
-
SHA512
fdf8c569f27baab4e5b1db869e6c1a2e738aab0b957bd435e34fdd82c3b8bf868bb4704a1996d1bff780f5a4ba95725afbfb03a963fe29c8469d1a02cabe27eb
-
SSDEEP
3072:XTPBpGn3e3iec5hKT7uVW0egfexWlyK4yOTFO+HLJJedbVTQiJTfZl:XTJpqu3A5qy4gACyZTFOELDqTJr
Malware Config
Signatures
Files
-
d9c4d0f2bca2eef8798e2f531decaa2370a7bef17a8bf37e77a25c6cfbb255cc.dll windows x86
d7a3d0e424180baa50cc708c14f85728
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
ExUuidCreate
RtlInitString
CcPreparePinWrite
RtlEqualString
IoGetDmaAdapter
KeBugCheck
strcat
FsRtlCheckLockForWriteAccess
PsGetCurrentThread
RtlUpperChar
IoRegisterDeviceInterface
ObReleaseObjectSecurity
IoAllocateIrp
RtlInitUnicodeString
SeDeassignSecurity
RtlCompareString
RtlEqualUnicodeString
IoDeleteSymbolicLink
RtlIntegerToUnicodeString
KeInsertByKeyDeviceQueue
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.itext Size: 1024B - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 772B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ