Static task
static1
Behavioral task
behavioral1
Sample
2d2cab3bc86fdb18b1d19a5380c91364dcee1113701dd6a82f64dae6d957d55c.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
2d2cab3bc86fdb18b1d19a5380c91364dcee1113701dd6a82f64dae6d957d55c.dll
Resource
win10v2004-20221111-en
General
-
Target
2d2cab3bc86fdb18b1d19a5380c91364dcee1113701dd6a82f64dae6d957d55c
-
Size
74KB
-
MD5
d17bd300017c81bb271d851ccb79bfd0
-
SHA1
25b52aab6eaed5d52b26cc2edd80a06c8fc19e12
-
SHA256
2d2cab3bc86fdb18b1d19a5380c91364dcee1113701dd6a82f64dae6d957d55c
-
SHA512
1e1f3afdd7af0893391904a443983a6122e15eaa2a2a441b47a9b27ecf65f2d76ffc33519f6b2c29143cd7f1543c634924327e6d67e0478a78f7136af7ddff4b
-
SSDEEP
1536:IwzW7IAeFhQzSx+C3Ikg+mem5Q31q4GHoeZZ0oT4tvLH:IwzW7eFOmyN3u1qLHoeZZ0f
Malware Config
Signatures
Files
-
2d2cab3bc86fdb18b1d19a5380c91364dcee1113701dd6a82f64dae6d957d55c.dll windows x86
7274ef265228bd0d9f6b75a4e5c42e55
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
RtlLengthRequiredSid
RtlRealSuccessor
KeAttachProcess
KeClearEvent
ZwTerminateProcess
PoRegisterDeviceForIdleDetection
FsRtlSplitLargeMcb
KeSetAffinityThread
RtlEnlargedUnsignedDivide
RtlTimeToTimeFields
KeInsertQueueApc
Sections
.data Size: - Virtual size: 84KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 65KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 344B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ