krnl
Static task
static1
Behavioral task
behavioral1
Sample
e1c73dddd56a52f3e8b1dca390cbbb34395426fee884a81ee12caa5a2b480943.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e1c73dddd56a52f3e8b1dca390cbbb34395426fee884a81ee12caa5a2b480943.dll
Resource
win10v2004-20221111-en
General
-
Target
e1c73dddd56a52f3e8b1dca390cbbb34395426fee884a81ee12caa5a2b480943
-
Size
6KB
-
MD5
902e85741a7541bbbe160c5b03626e30
-
SHA1
978a0aaea3eb10501507898510bed5dfc21703fb
-
SHA256
e1c73dddd56a52f3e8b1dca390cbbb34395426fee884a81ee12caa5a2b480943
-
SHA512
3b50c508311aa396e133fea5044d14c6a6d6fa73ebfb8a578e278b31c8725c29965e1089a02efd8a4252fc353481f403c2773a7f8122aca7a5ca47ff94e4dd5d
-
SSDEEP
48:a7Q2voyT+Bt5a9KudNgaK6gi+vM2l5bP9vuDP4lnPMTIkQiL1Jd/G6jvMbXXXYQd:qT+ZKSPHl52xad
Malware Config
Signatures
Files
-
e1c73dddd56a52f3e8b1dca390cbbb34395426fee884a81ee12caa5a2b480943.dll windows x86
b1739664e08d6f9c7ad5fbd4058e1368
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileW
VirtualAlloc
SetEnvironmentVariableA
ReadFile
shell32
ShellExecuteA
ShellExecuteW
msvcrt
free
_initterm
malloc
_adjust_fdiv
Exports
Exports
Sections
.text Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 497B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 136B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ