krnl
Static task
static1
Behavioral task
behavioral1
Sample
edc320cea7c9693f6e459e5a5bf0fd49ca185e6b181ab83488694cdeefb9a786.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
edc320cea7c9693f6e459e5a5bf0fd49ca185e6b181ab83488694cdeefb9a786.dll
Resource
win10v2004-20221111-en
General
-
Target
edc320cea7c9693f6e459e5a5bf0fd49ca185e6b181ab83488694cdeefb9a786
-
Size
5KB
-
MD5
4392198f3e6f60ffee9d790294aac5b1
-
SHA1
11767933f6d640202b95e9af76cfe0789650b707
-
SHA256
edc320cea7c9693f6e459e5a5bf0fd49ca185e6b181ab83488694cdeefb9a786
-
SHA512
516f89c160086c5edde2b66d0a505407b104cddfbd7afef82f61b452b907665081ae87bf62514e1b6a984fe55ff52bd3bc05974346d6fac24129224b66946ddd
-
SSDEEP
96:qT+ZK1/7HemR/Gzq0CeUPj6LdIVW1cIeb0:qKA/yyiBUzVWCHb0
Malware Config
Signatures
Files
-
edc320cea7c9693f6e459e5a5bf0fd49ca185e6b181ab83488694cdeefb9a786.dll windows x86
b1739664e08d6f9c7ad5fbd4058e1368
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileW
VirtualAlloc
SetEnvironmentVariableA
ReadFile
shell32
ShellExecuteA
ShellExecuteW
msvcrt
free
_initterm
malloc
_adjust_fdiv
Exports
Exports
Sections
.text Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 497B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 136B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ