Static task
static1
Behavioral task
behavioral1
Sample
02d4db4000d0451704aa592d7b5abd6317e4ae978dd4378c90141185439a6e47.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
02d4db4000d0451704aa592d7b5abd6317e4ae978dd4378c90141185439a6e47.dll
Resource
win10v2004-20220812-en
General
-
Target
02d4db4000d0451704aa592d7b5abd6317e4ae978dd4378c90141185439a6e47
-
Size
47KB
-
MD5
56617d97c97981a8f7b77612ef731767
-
SHA1
7bd0a57202776a1f465ee65c2857134342eeb19a
-
SHA256
02d4db4000d0451704aa592d7b5abd6317e4ae978dd4378c90141185439a6e47
-
SHA512
ba9770078a725033dfbc87210d4b40f4307c9c4d8520f058020c368ba3132b6ab7af6cd62ca41b07af5523a732f96c965e1511ce5bf1d34bf4d9f367756641f2
-
SSDEEP
768:1yKZnFciMe0kGl1m7LntbmOPIbD4UpjQdNiUU/ptRvIUYNB0b:IKhkkqY7LtfCD4UpYiUU/pfu0
Malware Config
Signatures
Files
-
02d4db4000d0451704aa592d7b5abd6317e4ae978dd4378c90141185439a6e47.dll windows x86
30fbaf7efca3c098bfa87babbd19e62b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
memcpy
RtlClearBits
MmFreeContiguousMemory
ZwLoadDriver
MmGrowKernelStack
RtlCharToInteger
SeSetSecurityDescriptorInfo
RtlRaiseException
RtlImageNtHeader
RtlNtStatusToDosErrorNoTeb
NlsAnsiCodePage
IoAcquireCancelSpinLock
ExAllocatePool
ZwCreateFile
ExFreePool
MmGetPhysicalAddress
ExInterlockedPushEntrySList
RtlCreateRegistryKey
ZwQueryValueKey
IoInitializeRemoveLockEx
RtlCreateUnicodeString
MmSizeOfMdl
KeI386Call16BitFunction
hal
HalReadDmaCounter
HalAllocateAdapterChannel
HalGetInterruptVector
HalHandleNMI
HalStartProfileInterrupt
HalSetBusData
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 903B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 39KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 38B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ