Static task
static1
Behavioral task
behavioral1
Sample
e4ca7ae81f3033c3fcf7952ce4f30bce77e9ce84e333507f09997d868afbb5d7.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e4ca7ae81f3033c3fcf7952ce4f30bce77e9ce84e333507f09997d868afbb5d7.dll
Resource
win10v2004-20220812-en
General
-
Target
e4ca7ae81f3033c3fcf7952ce4f30bce77e9ce84e333507f09997d868afbb5d7
-
Size
72KB
-
MD5
462428f6bf06460991f15ae4097fc4a0
-
SHA1
9136283357d51275482c958a5c32b92c2b60178c
-
SHA256
e4ca7ae81f3033c3fcf7952ce4f30bce77e9ce84e333507f09997d868afbb5d7
-
SHA512
d4776f9381f999c3767d1a848e6a2374cf5466c03a9759f5b40766d831dd910f2a58c960a1c8344e0bc678b55d6d85fdce3c8f8fa20c4b128be422e23f3df11f
-
SSDEEP
1536:Jg5dBfQYCLgSFT01LCiFa8Od7/5YpK/OVtSbOeKjUQOUoF/NPZ5p:AddvAgSypNajdhO3SqeKYQOUmn5
Malware Config
Signatures
Files
-
e4ca7ae81f3033c3fcf7952ce4f30bce77e9ce84e333507f09997d868afbb5d7.dll windows x86
2567faeea962ee3d480a40006093d2e7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
FsRtlAddToTunnelCache
IoCheckFunctionAccess
IoStartPacket
RtlConvertLongToLargeInteger
ProbeForRead
ZwWaitForMultipleObjects
IoRegisterDeviceInterface
Sections
.data Size: - Virtual size: 84KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 250B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ