Static task
static1
Behavioral task
behavioral1
Sample
e55d91232da12368be599c62996f59d6b3047212cd8332c19fad9f7dd689ad8b.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e55d91232da12368be599c62996f59d6b3047212cd8332c19fad9f7dd689ad8b.dll
Resource
win10v2004-20220812-en
General
-
Target
e55d91232da12368be599c62996f59d6b3047212cd8332c19fad9f7dd689ad8b
-
Size
156KB
-
MD5
c91b86632d6a6365451c405f00e0f7b0
-
SHA1
f7e64beff21b9ce874acb874c6221e1dc8393fe1
-
SHA256
e55d91232da12368be599c62996f59d6b3047212cd8332c19fad9f7dd689ad8b
-
SHA512
df12cbe4908a87cf80021457f9e714b3ebd4d72e1ab6c75c35b06e37bd6b810b2d533b88f1b9d4e1aaab940457b597e3f3f4ce3ae6902dbd65e635ee30e0efb8
-
SSDEEP
3072:FFUtZbFoGs37owvY8fMOyTUcF+yY0LZAZP1itvODLKI5:FW5sroqfMOyTU5yrMdmvOXKM
Malware Config
Signatures
Files
-
e55d91232da12368be599c62996f59d6b3047212cd8332c19fad9f7dd689ad8b.dll windows x86
21cd74548fde90674ea368eed6e882db
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kload
LogWithFloat
GetInputTable
GetInputCfg
KDrawText
dksiSetMenuTitle
GetLCMStadium
MasterCallNext
LogWithNumber
MasterHookFunction
Log
GetPESInfo
RegisterKModule
HookFunction
UnhookFunction
kernel32
VirtualFree
RtlUnwind
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
SetEndOfFile
LoadLibraryA
GetOEMCP
GetACP
GetCPInfo
CreateFileA
FlushFileBuffers
VirtualProtect
GetTickCount
GetCommandLineA
GetVersion
HeapFree
GetLastError
CloseHandle
ReadFile
WriteFile
GetProcAddress
GetModuleHandleA
ExitProcess
TerminateProcess
GetCurrentProcess
HeapDestroy
HeapCreate
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetFilePointer
HeapAlloc
VirtualAlloc
HeapReAlloc
SetStdHandle
Sections
.text Size: 32KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 776B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE