krnl
Static task
static1
Behavioral task
behavioral1
Sample
6b57e6516ee72febb971f3c12fbf5f52c79003cd803d25ddce2d40e6ff0a9845.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
6b57e6516ee72febb971f3c12fbf5f52c79003cd803d25ddce2d40e6ff0a9845.dll
Resource
win10v2004-20220812-en
General
-
Target
6b57e6516ee72febb971f3c12fbf5f52c79003cd803d25ddce2d40e6ff0a9845
-
Size
4KB
-
MD5
ddb0b16474088122f9b29df68b650280
-
SHA1
4a04b5a01b5875b611ea1f26b990e8932d4e6434
-
SHA256
6b57e6516ee72febb971f3c12fbf5f52c79003cd803d25ddce2d40e6ff0a9845
-
SHA512
8aa21a24ce6be386728574ca43f425ef984152375432cadba7ba9d6d81773cdce143357fdc1d2f01634413299e3753c489e3704f2df038faa8f333bef35be228
-
SSDEEP
24:eNGS7EiUT73Ce2v/kPVCRVtc44MxFOKMtc8v874IVHLeSpNTTenGHqQm8C5zoIXs:a7Q2voyT+Bt5a9flTe3QmlFbKx
Malware Config
Signatures
Files
-
6b57e6516ee72febb971f3c12fbf5f52c79003cd803d25ddce2d40e6ff0a9845.dll windows x86
b1739664e08d6f9c7ad5fbd4058e1368
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileW
VirtualAlloc
SetEnvironmentVariableA
ReadFile
shell32
ShellExecuteA
ShellExecuteW
msvcrt
free
_initterm
malloc
_adjust_fdiv
Exports
Exports
Sections
.text Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 497B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 136B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ