Static task
static1
Behavioral task
behavioral1
Sample
30bd106418ead20df46e9b06d297407bcb06daef8051ee28f55085926843a0f6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
30bd106418ead20df46e9b06d297407bcb06daef8051ee28f55085926843a0f6.exe
Resource
win10v2004-20220812-en
General
-
Target
30bd106418ead20df46e9b06d297407bcb06daef8051ee28f55085926843a0f6
-
Size
24KB
-
MD5
9e8ab2a0297be3a846fc4add683b89e8
-
SHA1
14b7cc5afb75a21175c25f3bf6738f1a2df17087
-
SHA256
30bd106418ead20df46e9b06d297407bcb06daef8051ee28f55085926843a0f6
-
SHA512
7ae494f3d0ef90ed00a5b54e5e44b7109853308f667c177a40f17027ffaaa00441124bc6912ee2d60a1c70e23041f3f92e7f165e617d503bd0834677d84874e5
-
SSDEEP
768:kw+pvh8Iu/Z7++ZnC3z+NZew1J/ZiajucnPzXQGiyH:k1v6Iu/5+V+NrR1u0AGio
Malware Config
Signatures
Files
-
30bd106418ead20df46e9b06d297407bcb06daef8051ee28f55085926843a0f6.exe windows x86
28d6a437f042e72a34ed723b3f5e49f3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
scsiport.sys
ScsiPortGetDeviceBase
ScsiPortMoveMemory
ScsiPortReadPortBufferUshort
ScsiPortStallExecution
ScsiPortReadPortUchar
ScsiPortWritePortUchar
ScsiPortNotification
ScsiPortCompleteRequest
ScsiPortLogError
ScsiPortReadPortUshort
ScsiPortConvertUlongToPhysicalAddress
ScsiPortGetBusData
ScsiPortWritePortBufferUshort
ScsiPortWritePortUlong
ScsiPortInitialize
ScsiPortSetBusDataByOffset
ScsiPortGetPhysicalAddress
ScsiPortGetUncachedExtension
Sections
.text Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 256B - Virtual size: 228B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 32B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 640B - Virtual size: 614B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 704B - Virtual size: 684B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ