Static task
static1
Behavioral task
behavioral1
Sample
7a7c24f29d9ff89bc131075f5912f84dc291d6a94e6496a6a6f34e6019e66572.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
7a7c24f29d9ff89bc131075f5912f84dc291d6a94e6496a6a6f34e6019e66572.dll
Resource
win10v2004-20220812-en
General
-
Target
7a7c24f29d9ff89bc131075f5912f84dc291d6a94e6496a6a6f34e6019e66572
-
Size
73KB
-
MD5
a380d5c42624c4559033fe448a0d8904
-
SHA1
47fb104717903b735dc64c2b0c3d59f0d8d2798e
-
SHA256
7a7c24f29d9ff89bc131075f5912f84dc291d6a94e6496a6a6f34e6019e66572
-
SHA512
3107f2567de771e186859ad9db146378e8d6a8e584c7fda0ef6909a54d96ac50fc746359c1afd3442fd0b89cdf5953eab1d2b38b86750230156bd5f1d581a9ac
-
SSDEEP
1536:PavZ2mat462noUH5ABpur/3yKlgduKcFyu47vN:PaEmatMn70A/ll7nFNYvN
Malware Config
Signatures
Files
-
7a7c24f29d9ff89bc131075f5912f84dc291d6a94e6496a6a6f34e6019e66572.dll windows x86
f382c6652ad33e30d45637ce57335ab4
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
IoAllocateController
MmSecureVirtualMemory
PsSetLoadImageNotifyRoutine
IoStartTimer
KeSaveFloatingPointState
MmSizeOfMdl
RtlInitString
RtlCharToInteger
ZwDeleteValueKey
IoReportResourceForDetection
MmFreeNonCachedMemory
RtlEqualString
KeSetPriorityThread
KePulseEvent
RtlInitUnicodeString
RtlEqualUnicodeString
RtlFindClearBits
KeCancelTimer
ZwEnumerateKey
IoCreateStreamFileObjectLite
ZwFsControlFile
IoSetSystemPartition
RtlIntegerToUnicodeString
IoAcquireCancelSpinLock
IoMakeAssociatedIrp
RtlCompareString
IoCheckShareAccess
hal
KeQueryPerformanceCounter
HalAcquireDisplayOwnership
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 74KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 840B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ