Static task
static1
Behavioral task
behavioral1
Sample
KrnlAPI.dll
Resource
win10v2004-20220812-en
General
-
Target
KrnlAPI.dll
-
Size
1.2MB
-
MD5
a83cc237d1329855e712d9a07fb3f3dd
-
SHA1
234561d33898d389c39c3fe9bff4ce9f6d10bc2b
-
SHA256
ed9df0bcf596f971863cdf49e7ed77754b3f088876e3d008f2a9f995d6776eb4
-
SHA512
90cf5f703f74802472fd3c9a1c8d0cfe767bfe4d82d31cd0a13ed86eec058272c7552079c30eb1d8bd2b4717802db9e6700144c29f23f99c1b64eb22fb21dfa6
-
SSDEEP
24576:6/DatK7f4Im/2dF989RLRXNlDeb1i9JyxAme3MpZp:62Of98zLRXNlDdJyxzCM/p
Malware Config
Signatures
Files
-
KrnlAPI.dll.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorDllMain
Sections
.text Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 872B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ