Static task
static1
Behavioral task
behavioral1
Sample
dadd0ea3d3d668af47529a5f52fa6e5497dd3c33263c2a3bf08c63c8f6828c19.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
dadd0ea3d3d668af47529a5f52fa6e5497dd3c33263c2a3bf08c63c8f6828c19.dll
Resource
win10v2004-20221111-en
General
-
Target
dadd0ea3d3d668af47529a5f52fa6e5497dd3c33263c2a3bf08c63c8f6828c19
-
Size
40KB
-
MD5
4a9470b412b42a2c4e1c70e7439ff76b
-
SHA1
59a3efb77314fc3b6d8081ef62869ea4af8d4845
-
SHA256
dadd0ea3d3d668af47529a5f52fa6e5497dd3c33263c2a3bf08c63c8f6828c19
-
SHA512
75ecb4a630c4c5e541f7a6004f705ffd6bbf98fe2aaa84241bc290435066563fcb2e40653e550d34c93f948de4ec15a54d447b5bb1efa4d55a217b2541f12f62
-
SSDEEP
768:R4oW3i1h5pmKUs5zDyJZaLc9RF47kGeyHiGleBv2RLPXdNddCQHKtD:R4EL/m8DyJZaLguFeyHijBelNYQHK
Malware Config
Signatures
Files
-
dadd0ea3d3d668af47529a5f52fa6e5497dd3c33263c2a3bf08c63c8f6828c19.dll windows x86
f463a09ea4ca9fca32bf26b9eea799fa
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
hal
HalMakeBeep
HalProcessorIdle
KeAcquireSpinLock
KfLowerIrql
ntoskrnl.exe
IoFreeIrp
KeUpdateRunTime
IoCreateDevice
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 744B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ