krnl
Static task
static1
Behavioral task
behavioral1
Sample
836152c2896fda32905e79659238408fc6747a0eeab1a72b394836ece3841920.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
836152c2896fda32905e79659238408fc6747a0eeab1a72b394836ece3841920.dll
Resource
win10v2004-20220812-en
General
-
Target
836152c2896fda32905e79659238408fc6747a0eeab1a72b394836ece3841920
-
Size
4KB
-
MD5
f1f409c0c923cede1925fb9b4d035400
-
SHA1
65813bedf9065e8d9f667d83c47242ccb353e027
-
SHA256
836152c2896fda32905e79659238408fc6747a0eeab1a72b394836ece3841920
-
SHA512
30d88f97947384cae91f674df61ff3331d92b8a9463a214edd5e564094d7aa72d19f13d0728839c036f3836ef8b21303bd77f18bc7f3253b28fbf374b26102d5
-
SSDEEP
48:a5zjMTGcITBVQVE1lcApsIhknc3i5g79ANwUVGVUgXmyEi:iT3Qu8Whkcr79Qw+GVUgX/Ei
Malware Config
Signatures
Files
-
836152c2896fda32905e79659238408fc6747a0eeab1a72b394836ece3841920.dll windows x86
eef941bf442aa3dad0f50a640a74e1a2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileW
VirtualAlloc
ReadFile
shell32
ShellExecuteA
msvcrt
free
_initterm
malloc
_adjust_fdiv
Exports
Exports
Sections
.text Size: 1024B - Virtual size: 524B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 418B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 120B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ