Static task
static1
Behavioral task
behavioral1
Sample
2054d68d9461506e8f225d2ebe22e8716aa573248359fd2ed48d51d8972e77e6.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2054d68d9461506e8f225d2ebe22e8716aa573248359fd2ed48d51d8972e77e6.dll
Resource
win10v2004-20220901-en
General
-
Target
2054d68d9461506e8f225d2ebe22e8716aa573248359fd2ed48d51d8972e77e6
-
Size
50KB
-
MD5
7b49419979254fb608dab868b6fd2020
-
SHA1
244e074102750ebf2c5bde112578bde7ee3a9d1f
-
SHA256
2054d68d9461506e8f225d2ebe22e8716aa573248359fd2ed48d51d8972e77e6
-
SHA512
5b86187ba75c38e5a1e99b5c5bb645373b76c133cb51ec89d8045e3bb91e934976edbcd83c96bcff0f77db2bc99a636e0b98c6a076ce3122db0bd7f51c48d0d8
-
SSDEEP
768:c/MulDPNY/WH/qUT0JImY4lRH5whNlycEMaCD0hhVtqKL87pZJ9w3T:7uo+/qUTAaA547TaNhnX87pxM
Malware Config
Signatures
Files
-
2054d68d9461506e8f225d2ebe22e8716aa573248359fd2ed48d51d8972e77e6.dll windows x86
f2207f451b765839c29fbb466e1e6dd4
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
_stricmp
ZwClose
strcpy
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 744B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE