Static task
static1
Behavioral task
behavioral1
Sample
de6450426138a227828ad887bedee87eefadca835c09ed50862d68a25197e80f.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
de6450426138a227828ad887bedee87eefadca835c09ed50862d68a25197e80f.dll
Resource
win10v2004-20220812-en
General
-
Target
de6450426138a227828ad887bedee87eefadca835c09ed50862d68a25197e80f
-
Size
106KB
-
MD5
02e8b0e8d4b86d7d9baa6b0c6a45214f
-
SHA1
9cf65216225b6a10ac1788a598f26fc82567f46c
-
SHA256
de6450426138a227828ad887bedee87eefadca835c09ed50862d68a25197e80f
-
SHA512
2817c4060aa6f20a0da5ed3a2c743c3382e1e21550b18f8daa0f1aaf7cd9f83045bcef500ccd4708cc71a4e0b9330c563080ec4cd480127c1eb51926a866d596
-
SSDEEP
1536:rhQOPpgP+f19BVbeayyyPYOl9mv6CyrWxwkLhdo3y8vZBPHOCwHUg4d:tP6+fPiIy7GtGeZwBvZBYHUg+
Malware Config
Signatures
Files
-
de6450426138a227828ad887bedee87eefadca835c09ed50862d68a25197e80f.dll windows x86
b56a4da48e05939b9499605d5435b53c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
RtlAnsiCharToUnicodeChar
RtlFindLeastSignificantBit
RtlInitAnsiString
ZwCreateDirectoryObject
IoAllocateWorkItem
RtlFindUnicodePrefix
IoAllocateIrp
IoCheckShareAccess
KeInsertQueue
KeUnstackDetachProcess
ZwCreateFile
KeClearEvent
ExVerifySuite
RtlUnicodeToMultiByteN
ExSystemTimeToLocalTime
ExLocalTimeToSystemTime
Sections
.text Size: 42KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.i_txt Size: 512B - Virtual size: 68B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.e_txt Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tele3 Size: 512B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tele1 Size: 512B - Virtual size: 44B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tele2 Size: 512B - Virtual size: 44B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tele4 Size: 1024B - Virtual size: 600B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 672B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ