Static task
static1
Behavioral task
behavioral1
Sample
ac3a9a90f649cb17752aee776d406a669aacf38d13994a8f7da0ed40ffb4ebc6.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ac3a9a90f649cb17752aee776d406a669aacf38d13994a8f7da0ed40ffb4ebc6.dll
Resource
win10v2004-20220812-en
General
-
Target
ac3a9a90f649cb17752aee776d406a669aacf38d13994a8f7da0ed40ffb4ebc6
-
Size
72KB
-
MD5
110645ca04737b68a3fb4c3d7b9015fd
-
SHA1
040e51b48cbd761a84d94ffc56ba9fea1f2e9254
-
SHA256
ac3a9a90f649cb17752aee776d406a669aacf38d13994a8f7da0ed40ffb4ebc6
-
SHA512
8d855cca215d815a9a4b24d4e1ca685228c9426ca6418b0228700ed1f289b6208ec2282649cc7f2349cbd599879702e6cbf8a0a63ac8aba6112de6c514c3c01d
-
SSDEEP
1536:9f0fhi7A0yGPcUqY1Y3zwmXrsCx0e2ljqQ/vjQh0undP:t0fwM0yGP+Y1Y3prsrein0uunV
Malware Config
Signatures
Files
-
ac3a9a90f649cb17752aee776d406a669aacf38d13994a8f7da0ed40ffb4ebc6.dll windows x86
cdcf6f2b2156e5bbf1dcd9905bf51184
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
RtlSecondsSince1970ToTime
CcPrepareMdlWrite
ExAcquireResourceSharedLite
IoCheckShareAccess
FsRtlFindInTunnelCache
NtReadFile
ZwRequestWaitReplyPort
RtlUlonglongByteSwap
Sections
.data Size: - Virtual size: 88KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 274B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ