Static task
static1
Behavioral task
behavioral1
Sample
2e3c08532e23f3cea206b04d4f27f400f497793921fe67fd4c1864432ecab352.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2e3c08532e23f3cea206b04d4f27f400f497793921fe67fd4c1864432ecab352.dll
Resource
win10v2004-20220812-en
General
-
Target
2e3c08532e23f3cea206b04d4f27f400f497793921fe67fd4c1864432ecab352
-
Size
73KB
-
MD5
84c01ae28fa90e0b2d27724c155bd5f2
-
SHA1
f5b69257b2633cdbf976c3431ffd90b399700a84
-
SHA256
2e3c08532e23f3cea206b04d4f27f400f497793921fe67fd4c1864432ecab352
-
SHA512
6b8d5d53f36fdf2ac655884c95a569efb3a2c830dfdbf0eff208b1b70a13b85d21b0244cff6ec8da72a1230c927e8a746c74b59361234dca1c3ebd165c287b89
-
SSDEEP
1536:Gtpj95M7I4YrcKY88w/17pXjEyoXoUEe4Z8E4yFuv+t1v:Gtpj95ME4YzYG99jro4UDi8E4yFG+t1v
Malware Config
Signatures
Files
-
2e3c08532e23f3cea206b04d4f27f400f497793921fe67fd4c1864432ecab352.dll windows x86
4c975f758f3f353909ec4fa6b8c542f5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
FsRtlNotifyUninitializeSync
RtlCharToInteger
RtlTimeToTimeFields
RtlIntegerToUnicodeString
RtlUpperChar
ZwEnumerateValueKey
RtlxAnsiStringToUnicodeSize
IoCreateStreamFileObjectLite
RtlInitUnicodeString
RtlCopyUnicodeString
RtlMapGenericMask
IoSetSystemPartition
RtlCompareString
RtlxUnicodeStringToAnsiSize
IoConnectInterrupt
RtlFindLeastSignificantBit
ObReferenceObjectByHandle
IoCreateSynchronizationEvent
RtlInitString
ZwClose
SeSinglePrivilegeCheck
KeResetEvent
SeDeassignSecurity
ZwOpenSymbolicLinkObject
RtlEqualUnicodeString
RtlUpperString
ExIsProcessorFeaturePresent
MmPageEntireDriver
RtlEqualString
Sections
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.itext Size: 1024B - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 720B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ