Static task
static1
Behavioral task
behavioral1
Sample
27f15de82db9f75ee1303a32933cdcb348ebd0c526ee78e1e4fcba3990007788.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
27f15de82db9f75ee1303a32933cdcb348ebd0c526ee78e1e4fcba3990007788.dll
Resource
win10v2004-20220812-en
General
-
Target
27f15de82db9f75ee1303a32933cdcb348ebd0c526ee78e1e4fcba3990007788
-
Size
73KB
-
MD5
025a9d0f48000c735a2f5edf80a46ee0
-
SHA1
4cb82441cb97fdfcbfb009e510e6ef4295a3f9f8
-
SHA256
27f15de82db9f75ee1303a32933cdcb348ebd0c526ee78e1e4fcba3990007788
-
SHA512
6f3e75ccfa6e548f30b43d3a5998ee23deac8d335faf4bb0509a4b60eaddf7ed41d5b434d12d873bebf73a927096ebfec09cf4ec349eaa225a724ba7564109d9
-
SSDEEP
1536:nVzZN7medShyEX9fq76sVKrjqwEsMmDkZVU5ZYv/T0thSYoeP9Mt1h:nVdN7med8yEZE6YW2tWkVUzk/T0t47O2
Malware Config
Signatures
Files
-
27f15de82db9f75ee1303a32933cdcb348ebd0c526ee78e1e4fcba3990007788.dll windows x86
8dc04f37d4de8fbad1ee588ef3cab31c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
hal
HalAcquireDisplayOwnership
KeQueryPerformanceCounter
ntoskrnl.exe
RtlCharToInteger
RtlEqualString
RtlInitUnicodeString
RtlEqualUnicodeString
RtlCompareString
IoInitializeIrp
RtlAnsiCharToUnicodeChar
KeInitializeApc
PsGetCurrentThread
IoMakeAssociatedIrp
RtlDowncaseUnicodeString
KeReleaseMutex
IoDisconnectInterrupt
ZwOpenKey
RtlAreBitsClear
ZwOpenSymbolicLinkObject
RtlInitString
PsIsThreadTerminating
RtlCreateUnicodeString
RtlIntegerToUnicodeString
Sections
.text Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 74KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 764B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ