Static task
static1
Behavioral task
behavioral1
Sample
288f55abafd3893fd41630f696b5573c4d760be6d810699bbfa17af9f456cd71.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
288f55abafd3893fd41630f696b5573c4d760be6d810699bbfa17af9f456cd71.dll
Resource
win10v2004-20220812-en
General
-
Target
288f55abafd3893fd41630f696b5573c4d760be6d810699bbfa17af9f456cd71
-
Size
53KB
-
MD5
9345f82b8a7802766563515257e2a6ba
-
SHA1
4e1d900577a8eb41b8661c6bb89011cb2c51844a
-
SHA256
288f55abafd3893fd41630f696b5573c4d760be6d810699bbfa17af9f456cd71
-
SHA512
83f5840c6db7b873eb480374672b08f6d4151bf8e97a0714ae6a472b9aaa16486e80ef437a5f4847ee8c269c8b50c97de0f9e86bba0a47419e0241e51af91bdb
-
SSDEEP
1536:nGLmuroF6RogMCf9ADx9I/gv5kJ9HJfA:GFo8RPzFO0lJ9HJo
Malware Config
Signatures
Files
-
288f55abafd3893fd41630f696b5573c4d760be6d810699bbfa17af9f456cd71.dll windows x86
8a41e3178b820088fd671d560f1a72b3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
RtlUpperString
RtlEqualUnicodeString
RtlEqualString
ZwReadFile
RtlVerifyVersionInfo
CcFastCopyRead
RtlCheckRegistryKey
SeSinglePrivilegeCheck
ExRegisterCallback
RtlCompareString
IoRaiseHardError
IoReportDetectedDevice
RtlTimeToTimeFields
RtlInitString
RtlUpperChar
RtlStringFromGUID
IoDeleteDevice
RtlIntegerToUnicodeString
RtlCharToInteger
CcSetBcbOwnerPointer
RtlUpcaseUnicodeChar
RtlInitUnicodeString
Sections
.text Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.itext Size: 1024B - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 856B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ