Static task
static1
Behavioral task
behavioral1
Sample
9f271a1bffe6bfa095e3fb3bd2d506258de0eb7830af2953279933f28a637127.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9f271a1bffe6bfa095e3fb3bd2d506258de0eb7830af2953279933f28a637127.dll
Resource
win10v2004-20220812-en
General
-
Target
9f271a1bffe6bfa095e3fb3bd2d506258de0eb7830af2953279933f28a637127
-
Size
70KB
-
MD5
02357d46a465b5e2c6d0bbf41694a5f8
-
SHA1
de7ff160c55eea3fa91ac065e2e25fade005d7a3
-
SHA256
9f271a1bffe6bfa095e3fb3bd2d506258de0eb7830af2953279933f28a637127
-
SHA512
d6a8b0e0be343c65eccc3e34f69d50ecb00e22001847ab4767522ee16907f446fc6891277cfc398f6ae8089a70a7921627c0e42c612e9fed2bc0a2bce604d0f8
-
SSDEEP
1536:OOwc1TU6BuWC3o5kMxhf/obCN5hG2KIL9J:jwIUgC3o5ke1/obC1R
Malware Config
Signatures
Files
-
9f271a1bffe6bfa095e3fb3bd2d506258de0eb7830af2953279933f28a637127.dll windows x86
a765ddf8219aceb62d6aeab9ad2da791
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
MmSizeOfMdl
RtlInitString
_wcsupr
RtlEqualString
RtlAddAccessAllowedAceEx
IoRequestDeviceEject
RtlMultiByteToUnicodeN
IoBuildPartialMdl
RtlEqualSid
RtlEqualUnicodeString
KeReleaseMutex
RtlInitUnicodeString
RtlCompareString
KeInitializeTimerEx
RtlFindSetBits
RtlUpperChar
RtlHashUnicodeString
Sections
.text Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.file Size: 512B - Virtual size: 320B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 6KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.type Size: 1024B - Virtual size: 990B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 708B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ