Static task
static1
Behavioral task
behavioral1
Sample
812a9cc66fae4dc28eda1023d358432ab3b16bdd8955d278f3b917b5a3131c6b.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
812a9cc66fae4dc28eda1023d358432ab3b16bdd8955d278f3b917b5a3131c6b.dll
Resource
win10v2004-20220812-en
General
-
Target
812a9cc66fae4dc28eda1023d358432ab3b16bdd8955d278f3b917b5a3131c6b
-
Size
135KB
-
MD5
29799acf5afffaa5a97d4c3bbae4d8a7
-
SHA1
fbd1e7a5fa943b9c1ac75dd5b91814bb6a0f0624
-
SHA256
812a9cc66fae4dc28eda1023d358432ab3b16bdd8955d278f3b917b5a3131c6b
-
SHA512
eaaf471384014b294902b1ec5ce53f6ce3e4711e0f357dcb3435670a4c18bbd74db31b9fef1a42d9a69bd5a8c5743dd546fd67166886eae10b797bf65133b350
-
SSDEEP
3072:wP6+fPiIy7GtGeZn0FvlyHvpkXGSCk+RgNJJI:K6kid7+GetAyHBFSb+RwJ
Malware Config
Signatures
Files
-
812a9cc66fae4dc28eda1023d358432ab3b16bdd8955d278f3b917b5a3131c6b.dll windows x86
b56a4da48e05939b9499605d5435b53c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
RtlAnsiCharToUnicodeChar
RtlFindLeastSignificantBit
RtlInitAnsiString
ZwCreateDirectoryObject
IoAllocateWorkItem
RtlFindUnicodePrefix
IoAllocateIrp
IoCheckShareAccess
KeInsertQueue
KeUnstackDetachProcess
ZwCreateFile
KeClearEvent
ExVerifySuite
RtlUnicodeToMultiByteN
ExSystemTimeToLocalTime
ExLocalTimeToSystemTime
Sections
.text Size: 42KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.i_txt Size: 512B - Virtual size: 68B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.e_txt Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tele3 Size: 512B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tele1 Size: 512B - Virtual size: 44B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tele2 Size: 512B - Virtual size: 44B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tele4 Size: 1024B - Virtual size: 600B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 672B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ