Static task
static1
Behavioral task
behavioral1
Sample
4cc26e43e01fa3e233fa32d32d82d2b92a554d7017ec236f092b1939660a3173.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
4cc26e43e01fa3e233fa32d32d82d2b92a554d7017ec236f092b1939660a3173.dll
Resource
win10v2004-20221111-en
General
-
Target
4cc26e43e01fa3e233fa32d32d82d2b92a554d7017ec236f092b1939660a3173
-
Size
73KB
-
MD5
4321e1898cdb5fc0b144f18df1709048
-
SHA1
0c49b40d2cb8671925fbd70d1dcb1fbcdef22cfd
-
SHA256
4cc26e43e01fa3e233fa32d32d82d2b92a554d7017ec236f092b1939660a3173
-
SHA512
0e9d49eaa8638e6fe62f948f5c14138c13f845de33e532fefb95560616d72e5124decf907097c23b44d1012e8665de0b62e678f2350c28631da61d95d5c66e9f
-
SSDEEP
1536:F5Wg3PyFbUq7vgAk4ICJV3tEGH8pMH2xGWUm9yQavNw5H/5hPq9qw8R:CmKN/vgz4Fz3KFpAWj9yQcw5zPq6
Malware Config
Signatures
Files
-
4cc26e43e01fa3e233fa32d32d82d2b92a554d7017ec236f092b1939660a3173.dll windows x86
7b1f2800cd4b4300bce6a77f564cccfe
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
RtlEqualSid
PsImpersonateClient
RtlDeleteNoSplay
IoAcquireRemoveLockEx
RtlUpcaseUnicodeChar
Sections
CODE Size: 3KB - Virtual size: 83KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 67KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 179B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 728B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 62B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ