?tiHqxxP@@YGFK@Z
Static task
static1
Behavioral task
behavioral1
Sample
09d848c2f8ec8d31cc18032194d83280.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
09d848c2f8ec8d31cc18032194d83280.dll
Resource
win10v2004-20231215-en
General
-
Target
09d848c2f8ec8d31cc18032194d83280
-
Size
46KB
-
MD5
09d848c2f8ec8d31cc18032194d83280
-
SHA1
b535bcc2cbcc8140f1caaf213ad69d158c35cf27
-
SHA256
3a0a6838a3b6b2fdc7e4bb8f52b26045055f0673315b7b7fe124cb637e8b568f
-
SHA512
8bbd8a8b34d23724805ff55c445e848dc0502090953e503b6089fbe34afed9f8469e34c5f323cbd36de846dd33ae4d4b403400b8c1d977ab3642937eca13de74
-
SSDEEP
768:au4kDjYfWDfs1gUsxbsQRiKdZ4zmvwwInz9VxE8c6uNzvNxvExTaw+Hl:au7DjYfWDU1gdsoBf4KJIz9VWb6MvIah
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 09d848c2f8ec8d31cc18032194d83280
Files
-
09d848c2f8ec8d31cc18032194d83280.dll windows:5 windows x86 arch:x86
593fc306a84795bf0d5250709af98665
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
ntoskrnl.exe
MmBuildMdlForNonPagedPool
RtlInt64ToUnicodeString
IoCheckEaBufferValidity
MmForceSectionClosed
RtlCopyLuid
IoGetCurrentProcess
ZwDeleteValueKey
KeBugCheck
ExReinitializeResourceLite
RtlUpperChar
RtlCreateUnicodeString
PoSetSystemState
ObGetObjectSecurity
IoCancelIrp
SeDeleteObjectAuditAlarm
RtlDeleteNoSplay
MmFreePagesFromMdl
KeRemoveEntryDeviceQueue
PsSetLoadImageNotifyRoutine
RtlGetNextRange
IoGetRelatedDeviceObject
ExDeleteNPagedLookasideList
RtlSetAllBits
MmProbeAndLockPages
FsRtlCheckLockForWriteAccess
IoStartPacket
FsRtlFastCheckLockForRead
IoGetRequestorProcessId
SeDeassignSecurity
Exports
Exports
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 872B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.dbgdir Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.dbg Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
INIT Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 512B - Virtual size: 446B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ