Static task
static1
Behavioral task
behavioral1
Sample
b1d152640700f135a40a389b15246cf8247fd1a123fed23c52999aa057f04925.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b1d152640700f135a40a389b15246cf8247fd1a123fed23c52999aa057f04925.dll
Resource
win10v2004-20220812-en
General
-
Target
b1d152640700f135a40a389b15246cf8247fd1a123fed23c52999aa057f04925
-
Size
180KB
-
MD5
82621795acdf84df2e922774d63954b3
-
SHA1
2d2b6b879753f2aa3d1f4c3873b2f390030dae94
-
SHA256
b1d152640700f135a40a389b15246cf8247fd1a123fed23c52999aa057f04925
-
SHA512
b0589b775eb5574a4d93d00a6f92bdf00bacbc2b1f546acaccb9ac8d1ba855a55e3ed52764be1f3a084834f571487ad757c0ee71b2365fb8a91af8f1da2cc9c6
-
SSDEEP
3072:nLjKQvEOfpfmkpQfy/wY+N6nwBMUfgnZEeZPn0thbeeFPoYGBOdX:nLZBflmjYxeqZEEPSBjLc2
Malware Config
Signatures
Files
-
b1d152640700f135a40a389b15246cf8247fd1a123fed23c52999aa057f04925.dll windows x86
71b21e0f1605aafa751adcc0ece8456e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
RtlFindUnicodePrefix
RtlEqualUnicodeString
MmLockPagableDataSection
CcPreparePinWrite
FsRtlFreeFileLock
RtlCompareString
RtlAnsiStringToUnicodeString
KeWaitForSingleObject
RtlInitUnicodeString
RtlInitString
IoSetThreadHardErrorMode
ZwMakeTemporaryObject
KeQueryActiveProcessors
IoStartPacket
ExGetPreviousMode
RtlEqualString
RtlHashUnicodeString
IoGetDeviceInterfaces
KeSetTimerEx
_wcsupr
RtlInitializeBitMap
Sections
.text Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.file Size: 512B - Virtual size: 384B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.type Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 788B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ