Static task
static1
Behavioral task
behavioral1
Sample
b38730ec48e3ed4a5162f1134527f43c1bd75dbc8942d61e4f1385a165d96a08.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b38730ec48e3ed4a5162f1134527f43c1bd75dbc8942d61e4f1385a165d96a08.exe
Resource
win10v2004-20220901-en
General
-
Target
b38730ec48e3ed4a5162f1134527f43c1bd75dbc8942d61e4f1385a165d96a08
-
Size
11KB
-
MD5
276c6088d7ef732ea4ac7c6f8c663070
-
SHA1
19a9696817d1baaa2483fcbe6c034e1a83bfd273
-
SHA256
b38730ec48e3ed4a5162f1134527f43c1bd75dbc8942d61e4f1385a165d96a08
-
SHA512
b1650f8e5e0802c3e5669dbb50616871cb940d401b13afa546bc4b861336d1efdec7085567abfad2e4f3dded5769610c01adf016a4701e771b25d7939411ca41
-
SSDEEP
192:/mN+enxfSnkA3XIkFmXKt6ddT2M1z27UdCuYbZL1evN:/moenxfg1X9mXddT2MZouYbV1ev
Malware Config
Signatures
Files
-
b38730ec48e3ed4a5162f1134527f43c1bd75dbc8942d61e4f1385a165d96a08.exe windows x86
f9323e860f09db8cf9fb9490974ecd26
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
scsiport.sys
ScsiPortReadPortUchar
ScsiPortWritePortUchar
ScsiPortStallExecution
ScsiPortGetPhysicalAddress
ScsiPortNotification
ScsiPortMoveMemory
ScsiPortCompleteRequest
ScsiPortGetSrb
ScsiPortGetVirtualAddress
ScsiPortConvertUlongToPhysicalAddress
ScsiPortLogError
ScsiPortGetUncachedExtension
ScsiPortGetDeviceBase
ScsiPortValidateRange
ScsiPortInitialize
ntoskrnl.exe
memset
memcpy
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 384B - Virtual size: 267B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 256B - Virtual size: 129B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 640B - Virtual size: 570B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 384B - Virtual size: 318B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ