krnl
Static task
static1
Behavioral task
behavioral1
Sample
b294f6e5921c2286ecb86e550df50675becffe25ebd6ef35ddca7b0cfb2698ed.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b294f6e5921c2286ecb86e550df50675becffe25ebd6ef35ddca7b0cfb2698ed.dll
Resource
win10v2004-20220812-en
General
-
Target
b294f6e5921c2286ecb86e550df50675becffe25ebd6ef35ddca7b0cfb2698ed
-
Size
5KB
-
MD5
3556f3167815b346e34510e73c7f19e0
-
SHA1
9248174737a007f13f8b13895df3e3fc65d9e31f
-
SHA256
b294f6e5921c2286ecb86e550df50675becffe25ebd6ef35ddca7b0cfb2698ed
-
SHA512
ecc3b9949e88b0180c43c03f625102d09bca1e5a746fe57548a033e790cd97bd1b9393c9f36356b2fa5de20e46ff953f08271acbbfe07ef031fb76673e4e5c80
-
SSDEEP
48:SASAl6a98rtNVhWOZU8tOZGKX8Q+CIuKgSo9vJ2ipS1ie3CjIX+ZR24oxggjGaUw:f8rv2OZVtOZdsRfxo90ipbX0uzDsNUw
Malware Config
Signatures
Files
-
b294f6e5921c2286ecb86e550df50675becffe25ebd6ef35ddca7b0cfb2698ed.dll windows x86
c664cc9ce6d81ef4489f9e82ae638f98
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileW
VirtualAlloc
CloseHandle
CreateThread
ReadFile
shell32
ShellExecuteA
ShellExecuteW
msvcrt
free
_initterm
malloc
_adjust_fdiv
Exports
Exports
Sections
.text Size: 1024B - Virtual size: 600B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 545B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 584B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 146B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ