krnl
Static task
static1
Behavioral task
behavioral1
Sample
eaa71b0b86e7888892cc57e6285fc9559de664059557cdef486d6eaebe05e414.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
eaa71b0b86e7888892cc57e6285fc9559de664059557cdef486d6eaebe05e414.dll
Resource
win10v2004-20221111-en
General
-
Target
eaa71b0b86e7888892cc57e6285fc9559de664059557cdef486d6eaebe05e414
-
Size
5KB
-
MD5
5ce3cf15599a337748af61d3aca97bb0
-
SHA1
1d5bf2b3b02ac45bf33b9198575a917e24416321
-
SHA256
eaa71b0b86e7888892cc57e6285fc9559de664059557cdef486d6eaebe05e414
-
SHA512
0c5aff4937cfbe3a8f2e7e335f86a3003cbff67523d91f8190a313d7993c74ca282fce777b1fb29b7d227e5ed0af8e121cc62fe57b84dd7941cbf78eedf062df
-
SSDEEP
48:a5zdM1cSTBg0r27vTuAEKniI0nDXxKzpyJESqLbVQdb+6yiXbmQGkcqCyaQxGM:PT3r2vu9bDXxKNyiSAbSyISQDGyn
Malware Config
Signatures
Files
-
eaa71b0b86e7888892cc57e6285fc9559de664059557cdef486d6eaebe05e414.dll windows x86
eef941bf442aa3dad0f50a640a74e1a2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileW
VirtualAlloc
ReadFile
shell32
ShellExecuteA
msvcrt
free
_initterm
malloc
_adjust_fdiv
Exports
Exports
Sections
.text Size: 1024B - Virtual size: 554B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 419B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 126B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ