Static task
static1
Behavioral task
behavioral1
Sample
75fe4af1869e73fe25b908df17e2bee0e0b1c5f745418ff014318cdc1ea238ff.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
75fe4af1869e73fe25b908df17e2bee0e0b1c5f745418ff014318cdc1ea238ff.exe
Resource
win10v2004-20220901-en
General
-
Target
75fe4af1869e73fe25b908df17e2bee0e0b1c5f745418ff014318cdc1ea238ff
-
Size
23KB
-
MD5
706f1fc6f4d9b57ed083960909fdeca0
-
SHA1
b11eee40f1bb18e7ad51cc76ebec37208ebbffa5
-
SHA256
75fe4af1869e73fe25b908df17e2bee0e0b1c5f745418ff014318cdc1ea238ff
-
SHA512
ecd50b74476cac283df26afdfd0b52697024ff79527fbd8404eafdb7eb7137d6eefadbf62081c959a5e8387ec2d81c57af9c2833c914cadf8b0b22d38089ae3f
-
SSDEEP
384:p+PGGGGGGo9mZrZJJxPlFG7vrMnDNResW29+YbS0XSWE:p+PGGGGGGo9CrZJJZlFG74pRbW29nbSQ
Malware Config
Signatures
Files
-
75fe4af1869e73fe25b908df17e2bee0e0b1c5f745418ff014318cdc1ea238ff.exe windows x86
44eaafa39695e0469d474f5d3b84017f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
IofCompleteRequest
ObReferenceObjectByHandle
RtlFreeUnicodeString
IoCreateFile
RtlAnsiStringToUnicodeString
RtlInitAnsiString
IoFreeIrp
KeSetEvent
ObfDereferenceObject
KeWaitForSingleObject
IofCallDriver
KeGetCurrentThread
KeInitializeEvent
IoAllocateIrp
_stricmp
IoFileObjectType
strncmp
IoGetCurrentProcess
IoDeleteDevice
IoDeleteSymbolicLink
DbgPrint
IoCreateSymbolicLink
IoCreateDevice
RtlInitUnicodeString
ProbeForWrite
ProbeForRead
ZwQueryInformationProcess
ZwPulseEvent
ZwQuerySystemInformation
IoGetRelatedDeviceObject
_except_handler3
hal
KfReleaseSpinLock
KeGetCurrentIrql
KfAcquireSpinLock
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 736B - Virtual size: 716B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 608B - Virtual size: 608B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
sosata2 Size: 32B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
sosata1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ESTisb Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 928B - Virtual size: 912B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 928B - Virtual size: 926B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ