Static task
static1
Behavioral task
behavioral1
Sample
890377727eab6aab3e7666202a47ed1a44f48f463361d2df1fcfa1584d27f7e8.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
890377727eab6aab3e7666202a47ed1a44f48f463361d2df1fcfa1584d27f7e8.dll
Resource
win10v2004-20220812-en
General
-
Target
890377727eab6aab3e7666202a47ed1a44f48f463361d2df1fcfa1584d27f7e8
-
Size
72KB
-
MD5
472a19c3969241af6fbbca013371ae19
-
SHA1
e9e3a035f0ac7600080d66358ce0c94ebec29333
-
SHA256
890377727eab6aab3e7666202a47ed1a44f48f463361d2df1fcfa1584d27f7e8
-
SHA512
f06b807d763629912bb7a431f4a38ae610601f7db6c0f6625b62a25106ada57b157e09a50d45bdde5838ad1c207df2a4508aca8e77d1bd42a83b1f533ab9624a
-
SSDEEP
1536:SwHV3IWTFJLXZwHV3IWTFJLXZwHV3IWTFJLXZwHV3IWTFJLXZwHV3IWTFJLX:913I4dX613I4dX613I4dX613I4dX613x
Malware Config
Signatures
Files
-
890377727eab6aab3e7666202a47ed1a44f48f463361d2df1fcfa1584d27f7e8.dll windows x86
ec72e0824730e7e272011fd30232b606
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
PsLookupProcessByProcessId
Sections
.text Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 8KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ