SpLsaModeInitialize
Static task
static1
Behavioral task
behavioral1
Sample
9a9b94e04c97df3b3df7ef20da36b11bf782a2b20db806c227612c44124d6bb3.dll
Resource
win10v2004-20230220-en
General
-
Target
9a9b94e04c97df3b3df7ef20da36b11bf782a2b20db806c227612c44124d6bb3.dll
-
Size
297KB
-
MD5
0df0b60a39f10be820b53dc5f2f74452
-
SHA1
d2e7135dd51d0d8864a0eb5b797faeaadf2fe0b3
-
SHA256
98b6992749819d0a34a196768c6c0d43b100ef754194308eae6aaa90352e2c13
-
SHA512
853b5846d49c4b46af4cdc1c47e7a132f20db14aa3af85594c1a672222333830afb30159ae810f41308e702cda7827d6863eec90cd4e125d82fed5779f1e825b
-
SSDEEP
6144:jHX8pR0HPJfMPQ/qRTatX9i+ph193u1A0huvSFVb8XqcYte:jHsEBfEQ//RY+phe1A0USFVgXqcqe
Malware Config
Signatures
Files
-
9a9b94e04c97df3b3df7ef20da36b11bf782a2b20db806c227612c44124d6bb3.dll.dll windows x64
b095cf677389cb2f1b84e81909252fdf
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
GetLastError
GetCurrentThreadId
FlsSetValue
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
RtlUnwindEx
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlCaptureContext
CloseHandle
GetProcAddress
GetModuleHandleA
ExitProcess
FlsGetValue
TlsFree
FlsFree
SetLastError
TlsSetValue
FlsAlloc
Sleep
HeapSetInformation
HeapCreate
HeapDestroy
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
CreateFileW
InitializeCriticalSection
SetStdHandle
WriteFile
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LoadLibraryA
HeapReAlloc
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
RtlVirtualUnwind
RtlLookupFunctionEntry
SetFilePointer
SetEndOfFile
ReadFile
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
HeapSize
CreateFileA
advapi32
CryptReleaseContext
CryptDecrypt
CryptAcquireContextW
CryptSetKeyParam
CryptImportKey
CryptDestroyKey
Exports
Exports
Sections
.text Size: 58KB - Virtual size: 58KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 219KB - Virtual size: 227KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ