Static task
static1
Behavioral task
behavioral1
Sample
bdaff94e7ca44eb99fec5ba9e23a443d92cf3592c1473c682c88bc16ecc0cbb2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bdaff94e7ca44eb99fec5ba9e23a443d92cf3592c1473c682c88bc16ecc0cbb2.exe
Resource
win10v2004-20220812-en
General
-
Target
bdaff94e7ca44eb99fec5ba9e23a443d92cf3592c1473c682c88bc16ecc0cbb2
-
Size
10KB
-
MD5
f92a2fefa868bcdb05747ba977319b03
-
SHA1
bcd0507a6de1dc7f1f6e44e1f3f48e8161e8a8fc
-
SHA256
bdaff94e7ca44eb99fec5ba9e23a443d92cf3592c1473c682c88bc16ecc0cbb2
-
SHA512
2983028d641e6a9e0d1f81c5af55ca8d1cc2380b11e9e62fcc400717fdfa694699513bfae479c96c4d08069a78251511afb0e84698dbc8fa6f078c2219b4008b
-
SSDEEP
96:ZYvXrvJVqwS4Xdb1sm+aE6RsiREKGAa8StDhNhMhH96Mh6to6vsJY73O+6rS7VEB:ZQDJTsKsiEUXmJk+73R6mfZX9/wq
Malware Config
Signatures
Files
-
bdaff94e7ca44eb99fec5ba9e23a443d92cf3592c1473c682c88bc16ecc0cbb2.exe windows x86
b15cb73f379d4a667a4291f0f596faa7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
RtlInitUnicodeString
IoCreateFile
IoFreeIrp
KeSetEvent
KeWaitForSingleObject
IofCallDriver
RtlAssert
KeGetCurrentThread
KeInitializeEvent
ObfDereferenceObject
IoDeleteSymbolicLink
IoGetRelatedDeviceObject
ObReferenceObjectByHandle
IoFileObjectType
ZwClose
DbgPrint
IoCreateSymbolicLink
IoCreateDevice
KeTickCount
IoAllocateIrp
IoDeleteDevice
hal
KeGetCurrentIrql
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 256B - Virtual size: 183B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 128B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 768B - Virtual size: 670B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 384B - Virtual size: 338B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ