Static task
static1
Behavioral task
behavioral1
Sample
37a9fdfb86b6edef3571dfd82c516347e6e7a33d6301c8248d891741089fde6e.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
37a9fdfb86b6edef3571dfd82c516347e6e7a33d6301c8248d891741089fde6e.dll
Resource
win10v2004-20220812-en
General
-
Target
37a9fdfb86b6edef3571dfd82c516347e6e7a33d6301c8248d891741089fde6e
-
Size
61KB
-
MD5
8297af9ea1f7fbcd6424b8f27b0be252
-
SHA1
4bc44f06703988ce23b99cdde7907414eb5e1659
-
SHA256
37a9fdfb86b6edef3571dfd82c516347e6e7a33d6301c8248d891741089fde6e
-
SHA512
6318d53ed3631a1e282045b0abe63bfdb54c1db549683b8784af5eecf1970eb66933cbf835db00023b5a6f677bc6ea3b5833b2ab7d20defc4bba0dea6236c871
-
SSDEEP
1536:V60Fm/nG3gf6F6RogMCfHqCKHEXEHmwzYVmcsdR:V6amff68RPzCCHEHmYYVmcsdR
Malware Config
Signatures
Files
-
37a9fdfb86b6edef3571dfd82c516347e6e7a33d6301c8248d891741089fde6e.dll windows x86
c07ea05a39e77638d4ac07003de78f48
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
KeLeaveCriticalRegion
IoAllocateMdl
ZwQueryKey
MmAllocateContiguousMemory
RtlCompareString
RtlEqualString
ExNotifyCallback
RtlInitString
MmFreeContiguousMemory
IoRegisterDeviceInterface
IoInvalidateDeviceState
RtlCharToInteger
RtlFreeAnsiString
RtlEqualUnicodeString
RtlIntegerToUnicodeString
IoConnectInterrupt
ZwQueryVolumeInformationFile
MmSecureVirtualMemory
KeInitializeTimer
IoStartTimer
RtlFindUnicodePrefix
ObReferenceObjectByPointer
PoSetPowerState
RtlInitUnicodeString
Sections
.text Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.itext Size: 1024B - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 828B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ