Static task
static1
Behavioral task
behavioral1
Sample
664c8bade4993c652957c9a81657073d931719b64e96ef9eedc05f7604f58eec.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
664c8bade4993c652957c9a81657073d931719b64e96ef9eedc05f7604f58eec.dll
Resource
win10v2004-20220812-en
General
-
Target
664c8bade4993c652957c9a81657073d931719b64e96ef9eedc05f7604f58eec
-
Size
36KB
-
MD5
087ccf9e7d7fb7b404d42f9096f05eed
-
SHA1
f35022f9b30afe2236eb503aa53f92b55f0b527e
-
SHA256
664c8bade4993c652957c9a81657073d931719b64e96ef9eedc05f7604f58eec
-
SHA512
d6911d31520aceb82c0116e687d7a3c904c5b528d7eb490bfeae0445e5c89eade35f8f6c20ead95fefd815340f0d0b43b0e8494ba850435f77e472ddd67e8531
-
SSDEEP
768:ew329r+wJRWQfq1LAdT65lJrozAoB4iV0DrWjB46ijeRKki5fD:TK3JR7C1LAdT6PJrboR26JmtD
Malware Config
Signatures
Files
-
664c8bade4993c652957c9a81657073d931719b64e96ef9eedc05f7604f58eec.dll windows x86
b8bdc523ee0dbfab55d6dae597388317
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
NlsOemLeadByteInfo
RtlImageNtHeader
RtlFormatCurrentUserKeyPath
FsRtlNumberOfRunsInLargeMcb
wcscmp
RtlUnicodeStringToOemString
PfxInsertPrefix
ExQueryPoolBlockSize
NtLockFile
RtlValidSid
hal
ExAcquireFastMutex
HalGetInterruptVector
HalInitSystem
HalMakeBeep
IoReadPartitionTable
HalQueryDisplayParameters
KeRaiseIrqlToSynchLevel
HalAssignSlotResources
HalClearSoftwareInterrupt
KeAcquireQueuedSpinLock
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 635B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 29KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 728B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 14B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ