krnl
Static task
static1
Behavioral task
behavioral1
Sample
d15871579e7afb3d2c1869532f0b4966f8012c20b90cd3ca4852dacc25d7921f.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d15871579e7afb3d2c1869532f0b4966f8012c20b90cd3ca4852dacc25d7921f.dll
Resource
win10v2004-20220901-en
General
-
Target
d15871579e7afb3d2c1869532f0b4966f8012c20b90cd3ca4852dacc25d7921f
-
Size
3KB
-
MD5
8e8f04fbfb92bf070675c95c25eedfb0
-
SHA1
29f1a991d7b8d9c8923365606097642aa3851fe3
-
SHA256
d15871579e7afb3d2c1869532f0b4966f8012c20b90cd3ca4852dacc25d7921f
-
SHA512
5d94c64c960ce1a9110c5159f7c7b2c1b23716b9ee1907bb6f60b80e6a29eb99730b4446c864c34a318faf9f52316a2b91c41e0af881320f50f2a1133510b47f
Malware Config
Signatures
Files
-
d15871579e7afb3d2c1869532f0b4966f8012c20b90cd3ca4852dacc25d7921f.dll windows x86
b1739664e08d6f9c7ad5fbd4058e1368
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileW
VirtualAlloc
SetEnvironmentVariableA
ReadFile
shell32
ShellExecuteA
ShellExecuteW
msvcrt
free
_initterm
malloc
_adjust_fdiv
Exports
Exports
Sections
.text Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 497B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 136B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ