Static task
static1
Behavioral task
behavioral1
Sample
e2661395d324c767166f01282ac547c84ee7c196932709ff9e8a5eb66ae1c600.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e2661395d324c767166f01282ac547c84ee7c196932709ff9e8a5eb66ae1c600.exe
Resource
win10v2004-20220812-en
General
-
Target
e2661395d324c767166f01282ac547c84ee7c196932709ff9e8a5eb66ae1c600
-
Size
5KB
-
MD5
6ed1abed76d54831a5a3251019a02092
-
SHA1
ec041e711a940aaacb7a9a62881318414453e301
-
SHA256
e2661395d324c767166f01282ac547c84ee7c196932709ff9e8a5eb66ae1c600
-
SHA512
30462aca5978452dae4f2fa3aa3abbc3111b177d0fa24a9a9f801ec8f905ac2b90d144ed71d0e50da3e4ea3edfa9e5597bd740ad68d5a1c0481652969a38f8ee
-
SSDEEP
96:FXx7P4fAlEbwWAULP+MOX158dSue2sTGehNNw0E6UB1EdUlpw20dBhD7XVGl:FB7PS01UL2b15Fue2verNXZyQ20jl
Malware Config
Signatures
Files
-
e2661395d324c767166f01282ac547c84ee7c196932709ff9e8a5eb66ae1c600.exe windows x86
5f0b48b4944f2fe0fae4b9426df6bddd
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
KeBugCheckEx
KeTickCount
pciidex.sys
PciIdeXSetBusData
PciIdeXInitialize
PciIdeXGetBusData
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 128B - Virtual size: 97B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 128B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 384B - Virtual size: 280B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 128B - Virtual size: 72B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ