Static task
static1
Behavioral task
behavioral1
Sample
e8f865b98524e023412932936d6585362d7a3d76c8eac81e413ea7098da246ae.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e8f865b98524e023412932936d6585362d7a3d76c8eac81e413ea7098da246ae.dll
Resource
win10v2004-20220812-en
General
-
Target
e8f865b98524e023412932936d6585362d7a3d76c8eac81e413ea7098da246ae
-
Size
74KB
-
MD5
c8b4d770ca9b78c49e297e36f1db5dc3
-
SHA1
1d0822479f5faffc0f142c09dc49247eb85d43e6
-
SHA256
e8f865b98524e023412932936d6585362d7a3d76c8eac81e413ea7098da246ae
-
SHA512
526d0b6f9df44761b5b132e203044af3547a4bf988bcfc4ceb874b583c8b0d1903ff4624b64ea53346e4e1adb3b525e3d8697ff5833edf015daed9df02559b17
-
SSDEEP
1536:yyhq/tuDZYY+gt4HshcsMuUrFSqKiQCRAP7QR/w1bb:bhq/tuDZY+aF3zQCAayX
Malware Config
Signatures
Files
-
e8f865b98524e023412932936d6585362d7a3d76c8eac81e413ea7098da246ae.dll windows x86
302aa484ee1d797424be29050ec3e7d5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
IoOpenDeviceInterfaceRegistryKey
ZwSetSystemTime
ZwWaitForMultipleObjects
ObInsertObject
RtlGetCompressionWorkSpaceSize
Sections
.data Size: - Virtual size: 84KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 65KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 207B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ