Static task
static1
Behavioral task
behavioral1
Sample
12395f4c99be6eca107a50a41decdc67761250d0c5890aa773850260e2682732.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
12395f4c99be6eca107a50a41decdc67761250d0c5890aa773850260e2682732.dll
Resource
win10v2004-20220812-en
General
-
Target
12395f4c99be6eca107a50a41decdc67761250d0c5890aa773850260e2682732
-
Size
36KB
-
MD5
04d9e770e0dc42e06e6b93d503a2fb10
-
SHA1
becde01429f1a883d8a40174de8b0de4d5aac99d
-
SHA256
12395f4c99be6eca107a50a41decdc67761250d0c5890aa773850260e2682732
-
SHA512
8ad87357325063f9ac2ab42ac75cf60e1f7fe29860c6259208e0486e2e0506bc3f4ce502c839b8e4df13995aaf97efd4626b6c1916fece6abd283aa4740e903b
-
SSDEEP
768:J6zLWxxMmRc8+WbgtL4SQA3vsqVxpAfXzJQ:0zq4mRc8+qgtUSBvsxfXzS
Malware Config
Signatures
Files
-
12395f4c99be6eca107a50a41decdc67761250d0c5890aa773850260e2682732.dll windows x86
9e9ab25f56993d8cd9f4eba25e1263e0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
SeValidSecurityDescriptor
_snprintf
RtlImageNtHeader
IoRegisterShutdownNotification
FsRtlTruncateMcb
ZwTerminateProcess
NtCreateEvent
ExfInterlockedInsertTailList
hal
WRITE_PORT_BUFFER_ULONG
KeTryToAcquireQueuedSpinLockRaiseToSynch
KeAcquireSpinLockRaiseToSynch
READ_PORT_BUFFER_UCHAR
KeAcquireQueuedSpinLockRaiseToSynch
READ_PORT_BUFFER_USHORT
READ_PORT_ULONG
HalAllocateCrashDumpRegisters
KeStallExecutionProcessor
HalQueryDisplayParameters
HalReportResourceUsage
WRITE_PORT_BUFFER_UCHAR
WRITE_PORT_ULONG
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 790B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 29KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 728B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 14B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ