Static task
static1
Behavioral task
behavioral1
Sample
10d07b14f63eb9b77bc0e26062f243383334b6c34d2b2262fde003a663b4045f.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
10d07b14f63eb9b77bc0e26062f243383334b6c34d2b2262fde003a663b4045f.dll
Resource
win10v2004-20221111-en
General
-
Target
10d07b14f63eb9b77bc0e26062f243383334b6c34d2b2262fde003a663b4045f
-
Size
47KB
-
MD5
28b34cc62ba32532702b8eb99e426560
-
SHA1
c4bd22641034f84f697a423b7a832559d854dfdc
-
SHA256
10d07b14f63eb9b77bc0e26062f243383334b6c34d2b2262fde003a663b4045f
-
SHA512
a1fdc2970fd903ace808debe1f427da41a8935a2216e54b58455c1b956c2f6a563c306a0bab7fd2d7ec9452190622b199c6c8e57b5cb025e9816b739864e0c6f
-
SSDEEP
768:EwKZnFciMe0kGl1m7LntbmOPIbD4UpjQdNiUU/ptRvIUYNB0b:TKhkkqY7LtfCD4UpYiUU/pfu0
Malware Config
Signatures
Files
-
10d07b14f63eb9b77bc0e26062f243383334b6c34d2b2262fde003a663b4045f.dll windows x86
30fbaf7efca3c098bfa87babbd19e62b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
memcpy
RtlClearBits
MmFreeContiguousMemory
ZwLoadDriver
MmGrowKernelStack
RtlCharToInteger
SeSetSecurityDescriptorInfo
RtlRaiseException
RtlImageNtHeader
RtlNtStatusToDosErrorNoTeb
NlsAnsiCodePage
IoAcquireCancelSpinLock
ExAllocatePool
ZwCreateFile
ExFreePool
MmGetPhysicalAddress
ExInterlockedPushEntrySList
RtlCreateRegistryKey
ZwQueryValueKey
IoInitializeRemoveLockEx
RtlCreateUnicodeString
MmSizeOfMdl
KeI386Call16BitFunction
hal
HalReadDmaCounter
HalAllocateAdapterChannel
HalGetInterruptVector
HalHandleNMI
HalStartProfileInterrupt
HalSetBusData
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 903B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 39KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 38B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ