Static task
static1
Behavioral task
behavioral1
Sample
8dd9119088b5afc0018e5c6516fe2e73d3ca22bc667e4ab4ed854fe3fcb3437b.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8dd9119088b5afc0018e5c6516fe2e73d3ca22bc667e4ab4ed854fe3fcb3437b.dll
Resource
win10v2004-20221111-en
General
-
Target
8dd9119088b5afc0018e5c6516fe2e73d3ca22bc667e4ab4ed854fe3fcb3437b
-
Size
183KB
-
MD5
8f76372b67cfc5e3d5a4a8e056724eb0
-
SHA1
761cff1d3468d0dfa1fbbe8369011eebe89380a4
-
SHA256
8dd9119088b5afc0018e5c6516fe2e73d3ca22bc667e4ab4ed854fe3fcb3437b
-
SHA512
485c8f0019126a770e9dbbe50e982905655b93c5fae41cefeb3a40a83bc925284ccc9107777816d13a37b2b81db82998a1a2d660b4065f94334549b25f6ff0f9
-
SSDEEP
3072:GrS1n7jeffJHoJQZJq3JsvCQA12ClmeUvR8I/U+owztYcegkZq9lz7VOfy+1iVyK:GaCoJ0Q3MIr5UyiU+dOgaq9lz7VdPyE7
Malware Config
Signatures
Files
-
8dd9119088b5afc0018e5c6516fe2e73d3ca22bc667e4ab4ed854fe3fcb3437b.dll windows x86
ef1c72cf4c95cb92fada26bd0bd67ee6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
FsRtlCheckLockForReadAccess
KeGetCurrentThread
MmMapIoSpace
CcIsThereDirtyData
KeBugCheck
RtlCopyUnicodeString
IoOpenDeviceRegistryKey
KePulseEvent
ExReleaseFastMutexUnsafe
memmove
KeInsertByKeyDeviceQueue
MmUnlockPagableImageSection
ExGetExclusiveWaiterCount
FsRtlOplockIsFastIoPossible
ExDeleteNPagedLookasideList
RtlLengthSid
IoReleaseVpbSpinLock
WRITE_REGISTER_BUFFER_ULONG
ZwOpenProcess
RtlDeleteRegistryValue
MmUnmapLockedPages
ZwCreateEvent
PoUnregisterSystemState
RtlUnicodeStringToAnsiString
IoAllocateErrorLogEntry
MmMapLockedPagesSpecifyCache
IoGetDeviceObjectPointer
FsRtlFastCheckLockForWrite
Sections
.text Size: 87KB - Virtual size: 87KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE