krnl
Static task
static1
Behavioral task
behavioral1
Sample
985a56720c8ce891bbfe8f12f022e84609108f8b8b1c2bdd3e6814fa3d80d518.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
985a56720c8ce891bbfe8f12f022e84609108f8b8b1c2bdd3e6814fa3d80d518.dll
Resource
win10v2004-20220812-en
General
-
Target
985a56720c8ce891bbfe8f12f022e84609108f8b8b1c2bdd3e6814fa3d80d518
-
Size
4KB
-
MD5
b5eea5f0010e9d589ec1dbcd3beb9820
-
SHA1
0f518434dced33278c98dfeea1130901b9b51aa8
-
SHA256
985a56720c8ce891bbfe8f12f022e84609108f8b8b1c2bdd3e6814fa3d80d518
-
SHA512
0d7f9d2eb451003ec965a7403fc62c7a751e37fc7fd79959c3872ddad5f3da58e0d6495814162a91775e70ccecb3257014ab3888f9bb19ad3e07a9f228d663ac
-
SSDEEP
48:a5zdM1cSTBg0r27vTuAEKdq1qOMZMCVZpW+oZD80CaybMDvqDF:PT3r2vu9Mq1cNZpW+B0qMDv0F
Malware Config
Signatures
Files
-
985a56720c8ce891bbfe8f12f022e84609108f8b8b1c2bdd3e6814fa3d80d518.dll windows x86
eef941bf442aa3dad0f50a640a74e1a2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileW
VirtualAlloc
ReadFile
shell32
ShellExecuteA
msvcrt
free
_initterm
malloc
_adjust_fdiv
Exports
Exports
Sections
.text Size: 1024B - Virtual size: 554B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 419B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 126B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ