Static task
static1
Behavioral task
behavioral1
Sample
8553cf4950d8b43db5946e4b3a833a303888e698a62c432fcb479e8a3810973e.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8553cf4950d8b43db5946e4b3a833a303888e698a62c432fcb479e8a3810973e.dll
Resource
win10v2004-20220812-en
General
-
Target
8553cf4950d8b43db5946e4b3a833a303888e698a62c432fcb479e8a3810973e
-
Size
31KB
-
MD5
61b17ec6b32fba4a71328f4efd94828d
-
SHA1
a0b804ab9595c14c7fbd24af39ec459cf0cef558
-
SHA256
8553cf4950d8b43db5946e4b3a833a303888e698a62c432fcb479e8a3810973e
-
SHA512
abf48d029d8a8eae68817316f708a8e9594ff1c8aeb1b7c6f7b3c8f6ef46fccec9f3960f826786d1dc73898a85288d3a54495aa48a87a7ecc8a372e5dad6c55b
-
SSDEEP
768:tRXE0eb533V9IbTmM4jaIONKRXE0eb533V9IbTmM4jaION:tRXE0el3lomM7jNKRXE0el3lomM7jN
Malware Config
Signatures
Files
-
8553cf4950d8b43db5946e4b3a833a303888e698a62c432fcb479e8a3810973e.dll windows x86
3d6b0cd4217f57d5bfd16e3b85b29d57
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
memcpy
Sections
.text Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 8KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ