Static task
static1
Behavioral task
behavioral1
Sample
33b6440f171ada3e69c842a0be3bd30895169d2bd46e40f64a82d9f6fcbe6d00.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
33b6440f171ada3e69c842a0be3bd30895169d2bd46e40f64a82d9f6fcbe6d00.dll
Resource
win10v2004-20220812-en
General
-
Target
33b6440f171ada3e69c842a0be3bd30895169d2bd46e40f64a82d9f6fcbe6d00
-
Size
106KB
-
MD5
0e3888acf5d7f1c1b2acffd41c64f75d
-
SHA1
b46ea4421868bd78c780567f77801610ed3c870b
-
SHA256
33b6440f171ada3e69c842a0be3bd30895169d2bd46e40f64a82d9f6fcbe6d00
-
SHA512
2c41d012652e4dae65a3f812c16b7e33381554b468d60b0c6906d44160c707636fbb3485beb23fadfa46b4e605c6d5df30ea30d07d4ec04e15f469931239f37e
-
SSDEEP
3072:+qfAZb25OHldTbVZuzxDkdgaKjJkNcbzCIVnijEN:ZfAZbjHlrZuzxDkdNcJzCEim
Malware Config
Signatures
Files
-
33b6440f171ada3e69c842a0be3bd30895169d2bd46e40f64a82d9f6fcbe6d00.dll windows x86
a4b389bbd0b465c78fa88bf29aa43c34
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
RtlIntegerToUnicodeString
RtlTimeToTimeFields
MmLockPagableDataSection
MmUnlockPagableImageSection
FsRtlFastUnlockSingle
RtlSecondsSince1980ToTime
RtlCompareString
RtlInitString
RtlEqualString
RtlEqualUnicodeString
RtlCharToInteger
FsRtlCheckOplock
KeQueryTimeIncrement
ZwQueryVolumeInformationFile
IoGetDeviceInterfaceAlias
RtlInitUnicodeString
IoGetAttachedDevice
KeSetImportanceDpc
KeInsertQueue
ExCreateCallback
SeDeassignSecurity
PsDereferencePrimaryToken
hal
KeQueryPerformanceCounter
HalAcquireDisplayOwnership
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 74KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 860B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ