Static task
static1
Behavioral task
behavioral1
Sample
d01b300a15957f7aad442e826f71683bda0d4f5083977699f51979cf425deb36.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d01b300a15957f7aad442e826f71683bda0d4f5083977699f51979cf425deb36.dll
Resource
win10v2004-20220901-en
General
-
Target
d01b300a15957f7aad442e826f71683bda0d4f5083977699f51979cf425deb36
-
Size
70KB
-
MD5
3f83e36b8e7d3b07177eeb5635382c68
-
SHA1
6633897923ed356ff1d29b77978b6c35f2c1083a
-
SHA256
d01b300a15957f7aad442e826f71683bda0d4f5083977699f51979cf425deb36
-
SHA512
4637effcf1ebf0f218dae4ae092a9f3e384951f006f764de0d547de23824ba7543dad17035a5db37f203cc38641370612f0b367f18e216d3ec567def72422239
-
SSDEEP
1536:Sx+6Uw4GbCYzVjakDHDMPOT+AG7CAJ9t10Odjvxcm6De:gYKBjamDMq+gktF6De
Malware Config
Signatures
Files
-
d01b300a15957f7aad442e826f71683bda0d4f5083977699f51979cf425deb36.dll windows x86
3f63a4562043952d3982e0b8f3404a0a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
FsRtlLookupLastLargeMcbEntry
NtWriteFile
MmProbeAndLockProcessPages
MmMapLockedPages
FsRtlGetNextLargeMcbEntry
atoi
NtRequestWaitReplyPort
FsRtlFastUnlockAllByKey
Sections
.data Size: - Virtual size: 84KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 65KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 268B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ