Static task
static1
Behavioral task
behavioral1
Sample
1e456199be2d1f5639bc8738e8cc6f8ac38745062a30029219a7c56f909bccec.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1e456199be2d1f5639bc8738e8cc6f8ac38745062a30029219a7c56f909bccec.dll
Resource
win10v2004-20220812-en
General
-
Target
1e456199be2d1f5639bc8738e8cc6f8ac38745062a30029219a7c56f909bccec
-
Size
53KB
-
MD5
0c161fead73153b7690dee17a5253111
-
SHA1
712533a66cc568155d4e5c7b72663afdf0ddce28
-
SHA256
1e456199be2d1f5639bc8738e8cc6f8ac38745062a30029219a7c56f909bccec
-
SHA512
85873c1b2d78977dd9584d60ffa356034c8a6a3be53bb68093890eed93232cdd5cdac1467ce4ec4780932c18c14c3d28e37d0fcf50a0b990575c029f4ae4eab5
-
SSDEEP
1536:MTJNi4ZYJM4RI/xUJ4oN4/bZ+J20+SGcD3fHG+:gJNvt5Sqoi0D+SGcrfm+
Malware Config
Signatures
Files
-
1e456199be2d1f5639bc8738e8cc6f8ac38745062a30029219a7c56f909bccec.dll windows x86
d22df639080d45bb4bfe1d47f6864e68
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
RtlUpperChar
IoQueueWorkItem
RtlxUnicodeStringToAnsiSize
RtlInitUnicodeString
IoStartNextPacket
MmMapLockedPagesSpecifyCache
RtlTimeToSecondsSince1970
KeWaitForMultipleObjects
FsRtlMdlWriteCompleteDev
RtlCompareString
IoCreateFile
RtlInitString
RtlIntegerToUnicodeString
KeSetTimer
IoFreeWorkItem
ObCreateObject
RtlEqualUnicodeString
KeQuerySystemTime
CcUnpinDataForThread
RtlEqualString
RtlFindClearBitsAndSet
RtlInitializeGenericTable
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.itext Size: 1024B - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 852B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ