Static task
static1
Behavioral task
behavioral1
Sample
7e7503800f8006cc93f06238f8cc4285512aed0c5a3dfa29f2da5ef1a2e7d3c0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7e7503800f8006cc93f06238f8cc4285512aed0c5a3dfa29f2da5ef1a2e7d3c0.exe
Resource
win10v2004-20220812-en
General
-
Target
7e7503800f8006cc93f06238f8cc4285512aed0c5a3dfa29f2da5ef1a2e7d3c0
-
Size
38KB
-
MD5
29e5e7bb30ed366f3b1a51db8445534e
-
SHA1
a484b3cbfb23a8280aa98cfefd457559ad53aa74
-
SHA256
7e7503800f8006cc93f06238f8cc4285512aed0c5a3dfa29f2da5ef1a2e7d3c0
-
SHA512
08129bf8901c10e4dfa8f346a6ff13b1a1efd34737f51e23a3ce93fdbaa52a8af18396a5cf5eef6e87f756503d0dc5a0c272ec936abbfd9e123bdbc9b4e35376
-
SSDEEP
768:sT1p3MZOtSjGqOEqNJa1FlyC9QzbWHLoSQYF/:sZp3X2MEqNJa1FlyC9QzbWHLoP
Malware Config
Signatures
Files
-
7e7503800f8006cc93f06238f8cc4285512aed0c5a3dfa29f2da5ef1a2e7d3c0.exe windows x86
67d43df0c4522f00f5d01aa352324e12
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
KeGetRecommendedSharedDataAlignment
memset
KeInitializeDpc
RtlInitUnicodeString
ExFreePoolWithTag
RtlHashUnicodeString
ExAllocatePoolWithTag
IoSetFileOrigin
ZwDeleteKey
KeTickCount
KeBugCheckEx
RtlGetVersion
KeGetCurrentThread
hal
KeGetCurrentIrql
Sections
.text Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 256B - Virtual size: 185B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 256B - Virtual size: 249B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 512B - Virtual size: 504B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ