krnl
Static task
static1
Behavioral task
behavioral1
Sample
50915567aef6caaffff27ef999eee486161b976aca747dee1905786f9bd142ff.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
50915567aef6caaffff27ef999eee486161b976aca747dee1905786f9bd142ff.dll
Resource
win10v2004-20220901-en
General
-
Target
50915567aef6caaffff27ef999eee486161b976aca747dee1905786f9bd142ff
-
Size
4KB
-
MD5
2585a16845e3e862cfc93abc9a9cb660
-
SHA1
7e86420b38a3009650df030dfe36b1f1bf78bb6f
-
SHA256
50915567aef6caaffff27ef999eee486161b976aca747dee1905786f9bd142ff
-
SHA512
11728723b50708456e875646527f1afb4aaf20cfb547c043a90621229d3548b6a6b8d95662143bf0c851b9e4bbc6659b61488f2e2c4427ed9a15312dfda3bd4e
-
SSDEEP
48:a5zjMTGcITBVQVE1lcq9ijN01/mmWv7B9MQvxsf/t:iT3Qu8q9ix/mk70kxsN
Malware Config
Signatures
Files
-
50915567aef6caaffff27ef999eee486161b976aca747dee1905786f9bd142ff.dll windows x86
eef941bf442aa3dad0f50a640a74e1a2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileW
VirtualAlloc
ReadFile
shell32
ShellExecuteA
msvcrt
free
_initterm
malloc
_adjust_fdiv
Exports
Exports
Sections
.text Size: 1024B - Virtual size: 524B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 418B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 120B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ