Static task
static1
Behavioral task
behavioral1
Sample
d339a47b13b1798b11e4e74bac2de9f93635a4d63bfc2a1e3705286516176c97.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d339a47b13b1798b11e4e74bac2de9f93635a4d63bfc2a1e3705286516176c97.dll
Resource
win10v2004-20220812-en
General
-
Target
d339a47b13b1798b11e4e74bac2de9f93635a4d63bfc2a1e3705286516176c97
-
Size
135KB
-
MD5
7d8096e7447eb65009ae4c939d4716c0
-
SHA1
e100ceb2aadfaeea86dc91e5ff940fcfeacd7344
-
SHA256
d339a47b13b1798b11e4e74bac2de9f93635a4d63bfc2a1e3705286516176c97
-
SHA512
9d70a2bd02e484e662a95fc45c0c2def454812f89286144b32b485ccf7fdf59b596dcb27a5eb71f656ad70f19d4185111d40cc99738757bde941071d70b53705
-
SSDEEP
3072:D/KuoEdTqfOj4zqcInj8xlGYd0ct0j24z3pGNBFKXU3Wao:D/K7EI04+dnj8yY+ch4z3wFKX
Malware Config
Signatures
Files
-
d339a47b13b1798b11e4e74bac2de9f93635a4d63bfc2a1e3705286516176c97.dll windows x86
131b2f05339260850d3cc12aed88673e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
IoInitializeTimer
RtlIntegerToUnicodeString
IoCreateSynchronizationEvent
IoGetRequestorProcessId
ObCreateObject
PsGetCurrentThreadId
KeSetTargetProcessorDpc
RtlFindSetBits
PsGetVersion
IoStartNextPacket
strcat
RtlCreateUnicodeString
RtlCompareString
RtlEqualUnicodeString
RtlInitUnicodeString
IoGetDeviceInterfaceAlias
KeInitializeMutex
IoGetCurrentProcess
RtlInitString
IoBuildSynchronousFsdRequest
RtlFindClearBits
PoSetSystemState
RtlEqualString
KeRemoveDeviceQueue
RtlUpperChar
IoFreeIrp
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.itext Size: 1024B - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 860B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ