krnl
Static task
static1
Behavioral task
behavioral1
Sample
5e6bc1dd3e1aab453d3b6be1a916d72fa028a6f667b666e689631d961aa6f679.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5e6bc1dd3e1aab453d3b6be1a916d72fa028a6f667b666e689631d961aa6f679.dll
Resource
win10v2004-20220901-en
General
-
Target
5e6bc1dd3e1aab453d3b6be1a916d72fa028a6f667b666e689631d961aa6f679
-
Size
4KB
-
MD5
ca84c614c1f1769ce9232e2e9d0d3340
-
SHA1
dbb0c940ae1eb5b8c737401706069319671968ff
-
SHA256
5e6bc1dd3e1aab453d3b6be1a916d72fa028a6f667b666e689631d961aa6f679
-
SHA512
aff0a5ad9b0b3f37b0a7518b309198294e7923835886dc7838185efccf977c3d8e72371b0233804f7070ae94ebcd0f3d7a25db2138f82956c2e6de76fffb72a3
-
SSDEEP
48:a5zdM1cSTBg0r27vTuAEKDPPVeUDngw6WcPhR8Fqpc:PT3r2vu9kPdeggwJg/pc
Malware Config
Signatures
Files
-
5e6bc1dd3e1aab453d3b6be1a916d72fa028a6f667b666e689631d961aa6f679.dll windows x86
eef941bf442aa3dad0f50a640a74e1a2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileW
VirtualAlloc
ReadFile
shell32
ShellExecuteA
msvcrt
free
_initterm
malloc
_adjust_fdiv
Exports
Exports
Sections
.text Size: 1024B - Virtual size: 554B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 419B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 126B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ