krnl
Static task
static1
Behavioral task
behavioral1
Sample
0b68daee50d06676e42c97fec060a22637b646cf6640798672cc879fc4c95bd9.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
0b68daee50d06676e42c97fec060a22637b646cf6640798672cc879fc4c95bd9.dll
Resource
win10v2004-20220812-en
General
-
Target
0b68daee50d06676e42c97fec060a22637b646cf6640798672cc879fc4c95bd9
-
Size
5KB
-
MD5
ec62be1840dd51b7ff6bd2c0def90050
-
SHA1
284ad352b15209f176ea1451698874310b68929d
-
SHA256
0b68daee50d06676e42c97fec060a22637b646cf6640798672cc879fc4c95bd9
-
SHA512
3f3d83d6ce3704065c85156da87991d979ab3494538c9a8aee73ebd7dcc89a115ea6bb9a5b0fa2b60eb1b4e4cd16a885bf95aa50a0a2bcbc83e87d87bbbfc864
-
SSDEEP
48:SASAl6a98rtNVhWOZU8tOZGKiJ4nH+zJTvBvuEwTmhma0gNRPQJKaWEugJ+uQn4T:f8rv2OZVtOZdR+zJT1uEwkCYAS4yG
Malware Config
Signatures
Files
-
0b68daee50d06676e42c97fec060a22637b646cf6640798672cc879fc4c95bd9.dll windows x86
c664cc9ce6d81ef4489f9e82ae638f98
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileW
VirtualAlloc
CloseHandle
CreateThread
ReadFile
shell32
ShellExecuteA
ShellExecuteW
msvcrt
free
_initterm
malloc
_adjust_fdiv
Exports
Exports
Sections
.text Size: 1024B - Virtual size: 600B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 545B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 584B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 146B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ