A:\cwuxepw\vqBufbc\bUAjp\bomslLKb.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2f1dc3e74106a91566f5f2679a42b49232aba1a89cdb324443d94060e62d3d31.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2f1dc3e74106a91566f5f2679a42b49232aba1a89cdb324443d94060e62d3d31.dll
Resource
win10v2004-20240910-en
General
-
Target
2f1dc3e74106a91566f5f2679a42b49232aba1a89cdb324443d94060e62d3d31
-
Size
36KB
-
MD5
f9d74961462c065b7fbe1ef347ddb952
-
SHA1
d666f7e5b219bd031a57491a2b50e8f36a00035a
-
SHA256
2f1dc3e74106a91566f5f2679a42b49232aba1a89cdb324443d94060e62d3d31
-
SHA512
7158123d503ee66d6eec5539e3c07fe3d537bbc73deba90b519107ac743e73e56ae20a9d989f058d72d15818945fda534b31e422c2e44d7bf049c71d1e3a7d16
-
SSDEEP
768:iY6bT/O3zcOe8BBYWUruks7XM865u3Z5QRX/m/5HIV3:idT/BOLBUrub7K5u3cRUHIl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2f1dc3e74106a91566f5f2679a42b49232aba1a89cdb324443d94060e62d3d31
Files
-
2f1dc3e74106a91566f5f2679a42b49232aba1a89cdb324443d94060e62d3d31.dll windows:5 windows x86 arch:x86
23f48fd87c648e56c5fe4b2329b39a92
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
ntoskrnl.exe
RtlCopyString
MmUnmapIoSpace
RtlInitString
IoCreateDevice
KeInitializeDpc
KeUnstackDetachProcess
RtlInitializeUnicodePrefix
SeDeassignSecurity
ExGetSharedWaiterCount
RtlAppendStringToString
ExAcquireFastMutexUnsafe
MmFreeNonCachedMemory
ExRegisterCallback
RtlEqualString
RtlUpcaseUnicodeString
RtlGetNextRange
FsRtlNotifyUninitializeSync
PoRequestPowerIrp
RtlCompareString
KeInsertQueue
CcFastCopyRead
RtlSetBits
FsRtlMdlWriteCompleteDev
KeRestoreFloatingPointState
atoi
RtlInitializeBitMap
RtlRandom
KeRundownQueue
Exports
Exports
?CesbrjeunlpboaNse@@YGXFPAI@Z
Sections
.code Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 940B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.INIT Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 656B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ