Static task
static1
Behavioral task
behavioral1
Sample
a01acc415eb80839cc6c1d58f4976d8a17439a75ab0a8ecc85b455b9e60e499e.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a01acc415eb80839cc6c1d58f4976d8a17439a75ab0a8ecc85b455b9e60e499e.dll
Resource
win10v2004-20220812-en
General
-
Target
a01acc415eb80839cc6c1d58f4976d8a17439a75ab0a8ecc85b455b9e60e499e
-
Size
5KB
-
MD5
d0b810a6ac12f1f5c3a428ae2d7885d5
-
SHA1
bcb17a75ade63a2f0b141ea2e436f75746e31b40
-
SHA256
a01acc415eb80839cc6c1d58f4976d8a17439a75ab0a8ecc85b455b9e60e499e
-
SHA512
e4e9a9836c0cb6b6e329386f7f180319dfd88f5a69922efb149de423f9f097f18a1eeaec5d056620e8d4d85bc0b971f5b48e361d590d49c0246bfdb514cc9c02
-
SSDEEP
96:RwDi6iiGIaXowjJj8KE7milmQ1k6GsvvV0DB5UVMecBLRMuwZ8BH:Rw+a1eSK+VSDcmFLRX
Malware Config
Signatures
Files
-
a01acc415eb80839cc6c1d58f4976d8a17439a75ab0a8ecc85b455b9e60e499e.dll windows x86
e1e1d0a5df64560bc70977dd16416473
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
RtlInitUnicodeString
RtlRandom
RtlCopyUnicodeString
RtlAppendUnicodeToString
RtlAppendUnicodeStringToString
MmGetSystemRoutineAddress
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 256B - Virtual size: 167B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 964B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 128B - Virtual size: 50B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
INIT Size: 256B - Virtual size: 232B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 256B - Virtual size: 188B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ