Static task
static1
Behavioral task
behavioral1
Sample
9a8461ff8de1907a04e142ee3be40ce5d6c949f57f4ad2fe8ba7bab49481ca18.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9a8461ff8de1907a04e142ee3be40ce5d6c949f57f4ad2fe8ba7bab49481ca18.dll
Resource
win10v2004-20220812-en
General
-
Target
9a8461ff8de1907a04e142ee3be40ce5d6c949f57f4ad2fe8ba7bab49481ca18
-
Size
53KB
-
MD5
a3b7b1e99ef2086e5025c2c33effd93d
-
SHA1
b1296ae8db5ec060dba8eeb47f86ee46cc14ea4b
-
SHA256
9a8461ff8de1907a04e142ee3be40ce5d6c949f57f4ad2fe8ba7bab49481ca18
-
SHA512
accc77408fe51dd041dd57222ee51920248cfb547ee5d15da5935e8538cc566ec122606df6b934bfe63aac2cac0a4d63b345dadb2d6b02ebbbbbcaca38c5698d
-
SSDEEP
768:boRmNdeoGCHdu2HE5oBPLRpH/WfrWkCBlsurZxLdfcQBA:boR2cC9jEcPXejWkCz9PCQBA
Malware Config
Signatures
Files
-
9a8461ff8de1907a04e142ee3be40ce5d6c949f57f4ad2fe8ba7bab49481ca18.dll windows x86
3375732317c82d8c59a8a09e3123a0bc
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
_wcsupr
IoBuildSynchronousFsdRequest
RtlInitUnicodeString
MmUnmapLockedPages
RtlEqualString
RtlCompareString
MmFreeContiguousMemory
RtlEqualUnicodeString
RtlCopyUnicodeString
RtlEqualSid
KeClearEvent
IoDisconnectInterrupt
KeGetCurrentThread
PoSetSystemState
ExReinitializeResourceLite
RtlInitString
RtlHashUnicodeString
IoSetHardErrorOrVerifyDevice
IoConnectInterrupt
ZwDeleteKey
Sections
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.file Size: 512B - Virtual size: 360B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 6KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.type Size: 1024B - Virtual size: 775B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 804B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ