Static task
static1
Behavioral task
behavioral1
Sample
eaf6c6da7d069b311704267c3cd432c28091e6e1a749ae013ccc330be1b6637b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
eaf6c6da7d069b311704267c3cd432c28091e6e1a749ae013ccc330be1b6637b.exe
Resource
win10v2004-20220901-en
General
-
Target
eaf6c6da7d069b311704267c3cd432c28091e6e1a749ae013ccc330be1b6637b
-
Size
29KB
-
MD5
636efea0faecff502ad63998e614ce0c
-
SHA1
8a7f41636b7e0d2ab4ed5577b7aacf41d860334f
-
SHA256
eaf6c6da7d069b311704267c3cd432c28091e6e1a749ae013ccc330be1b6637b
-
SHA512
2d98adf55ce0beca9a195e5342f1f4c6fc6694fed983975f91edcb4972b9c2b4918ef55083faca817c3659d988a36ab7960079ef7d125e20836dabe5aaf22e20
-
SSDEEP
384:KftkKY5UNTod15jSuwJKwB7VaLzKnNXsI2Na0xp7VolhoukkvyV:WtlNsdUJH7VPntsIh0kqV
Malware Config
Signatures
Files
-
eaf6c6da7d069b311704267c3cd432c28091e6e1a749ae013ccc330be1b6637b.exe windows x86
caed740047327835987440169debea21
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
PsGetCurrentProcessId
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 32B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 64B - Virtual size: 35B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 96B - Virtual size: 86B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 64B - Virtual size: 46B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ