Static task
static1
Behavioral task
behavioral1
Sample
3d043919b24c4a8433315d09565578b2043d502c7c45efb8ba0a0d0d7eb2ad49.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3d043919b24c4a8433315d09565578b2043d502c7c45efb8ba0a0d0d7eb2ad49.dll
Resource
win10v2004-20221111-en
General
-
Target
3d043919b24c4a8433315d09565578b2043d502c7c45efb8ba0a0d0d7eb2ad49
-
Size
48KB
-
MD5
0d61355c00729008023f96448c32b000
-
SHA1
7da43749670302b1a6095c4f11e9adcc9d4e06fb
-
SHA256
3d043919b24c4a8433315d09565578b2043d502c7c45efb8ba0a0d0d7eb2ad49
-
SHA512
9730303f83d19c869d406e4f9a0ede1c5227b7ea63451ade3d6422f968db2170d22d1cd6d87f730894b1f4c97e53caddb8e6762216c7796c7f7e2f004163747a
-
SSDEEP
768:uAoNm3+gUo2833MAxD96X+K/AR+8+r5jESkDhFw+Eb3Z/J6yagwvu/vHonznn:bZ3Ko28MGD9l6ARvSk1q3Zh6y4jnzn
Malware Config
Signatures
Files
-
3d043919b24c4a8433315d09565578b2043d502c7c45efb8ba0a0d0d7eb2ad49.dll windows x86
edb17155b32133862065ee13c550dbf4
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
RtlEqualString
RtlFindLeastSignificantBit
RtlClearBits
RtlDowncaseUnicodeString
RtlRandom
IoBuildSynchronousFsdRequest
ExUuidCreate
SeTokenIsRestricted
strcat
ZwEnumerateKey
RtlIntegerToUnicodeString
FsRtlFastUnlockSingle
RtlInitString
RtlInitUnicodeString
ZwQueryKey
IoFreeWorkItem
RtlEqualUnicodeString
IoGetDeviceProperty
RtlUpperChar
RtlCompareString
RtlInitializeUnicodePrefix
ExDeletePagedLookasideList
IoSetShareAccess
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.itext Size: 1024B - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 772B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ