Static task
static1
Behavioral task
behavioral1
Sample
6cdfbd227e4e05464fd47be51f8a1441bd978712874eda7596bc1edfcc4f19a7.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
6cdfbd227e4e05464fd47be51f8a1441bd978712874eda7596bc1edfcc4f19a7.dll
Resource
win10v2004-20221111-en
General
-
Target
6cdfbd227e4e05464fd47be51f8a1441bd978712874eda7596bc1edfcc4f19a7
-
Size
5KB
-
MD5
699b982f7377bbe08fcc5bb1513433a0
-
SHA1
70290f889549ce0800c9435d354de5aae6ce306d
-
SHA256
6cdfbd227e4e05464fd47be51f8a1441bd978712874eda7596bc1edfcc4f19a7
-
SHA512
3932a44ecc32acbf3c27e170b52d8bf59c8823905036288313bfe7960f0017803ffab6fa3ef448ded36e5406927c1afd6ce7a8ebd47ffd0694b702091c86173c
-
SSDEEP
96:RWDi6iiGIaXowjJj8KE7milmQ1k6GsvvV0DB5UVMecBeWmb/BH:RW+a1eSK+VSDcmFny
Malware Config
Signatures
Files
-
6cdfbd227e4e05464fd47be51f8a1441bd978712874eda7596bc1edfcc4f19a7.dll windows x86
e1e1d0a5df64560bc70977dd16416473
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
RtlInitUnicodeString
RtlRandom
RtlCopyUnicodeString
RtlAppendUnicodeToString
RtlAppendUnicodeStringToString
MmGetSystemRoutineAddress
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 256B - Virtual size: 167B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 964B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 128B - Virtual size: 50B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
INIT Size: 256B - Virtual size: 232B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 256B - Virtual size: 188B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ