Static task
static1
Behavioral task
behavioral1
Sample
234bd26eb1c66ce785d599a2440666f354124ce1841715f6bc159d335d6769f2.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
234bd26eb1c66ce785d599a2440666f354124ce1841715f6bc159d335d6769f2.dll
Resource
win10v2004-20220812-en
General
-
Target
234bd26eb1c66ce785d599a2440666f354124ce1841715f6bc159d335d6769f2
-
Size
65KB
-
MD5
102d7cfb2cc22949619909842c414e7f
-
SHA1
d909c9a8e8a77d46b673f9e169bd31aeb27cf956
-
SHA256
234bd26eb1c66ce785d599a2440666f354124ce1841715f6bc159d335d6769f2
-
SHA512
9570d6b80fb365608e92a791e38b90828650dedb5e2e2141768203d8c7e848c81886a9c4d286186a1f977f506f3beaa03932c7fa20168f61a31b91df7c1d0e2a
-
SSDEEP
1536:XdmFFLIlTOp9ZlNjBUnWCKQV0/BcYTrZ7ammE5TWX028:XdmFBCOllfluwLrhambtCZ8
Malware Config
Signatures
Files
-
234bd26eb1c66ce785d599a2440666f354124ce1841715f6bc159d335d6769f2.dll windows x86
bde20d818ca9518e9b11623ef4e89b42
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
hal
KeQueryPerformanceCounter
ntoskrnl.exe
KeTickCount
KeInitializeTimer
KeInitializeSpinLock
KeInitializeEvent
PsGetCurrentThreadId
PsGetCurrentProcessId
MmQuerySystemSize
PsGetVersion
KeQueryActiveProcessors
KeInitializeMutex
IoGetCurrentProcess
memcpy
memset
KeGetCurrentThread
Sections
.text Size: 62KB - Virtual size: 62KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 424B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 128B - Virtual size: 14B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 512B - Virtual size: 450B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 896B - Virtual size: 888B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ