Static task
static1
Behavioral task
behavioral1
Sample
3998e62a5e1c45740973b26d2feff6d1b4ea66a224a5c2c64c5a001041e23d9f.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
3998e62a5e1c45740973b26d2feff6d1b4ea66a224a5c2c64c5a001041e23d9f.exe
Resource
win10v2004-20220812-en
General
-
Target
3998e62a5e1c45740973b26d2feff6d1b4ea66a224a5c2c64c5a001041e23d9f
-
Size
91KB
-
MD5
67c88fce97f31a65d379d66e7b25f54d
-
SHA1
7adffd14ff1edd866deeddffb872a66c48a67140
-
SHA256
3998e62a5e1c45740973b26d2feff6d1b4ea66a224a5c2c64c5a001041e23d9f
-
SHA512
71f03a6f061d7fb682f95504414a7a11195c86c77db587305d3fee9fd0f635a1042c1b1a225777af1fc36e414bd3b36dceff005f049dfdbb4be46dc221a56443
-
SSDEEP
768:Ufu0mFPwkXcLoxY3uHStIAUkKKv3J3RgVG+5SaKAizh:p0Cwuc8gEStIW31R3+5SZh
Malware Config
Signatures
Files
-
3998e62a5e1c45740973b26d2feff6d1b4ea66a224a5c2c64c5a001041e23d9f.exe windows x86
fea9927b60bf249013210ab10a38b7f9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
memmove
KeQuerySystemTime
ExAllocatePool
scsiport.sys
ScsiPortReadPortUlong
ScsiPortMoveMemory
ScsiPortInitialize
ScsiPortLogError
ScsiPortStallExecution
ScsiPortReadPortBufferUshort
ScsiPortWritePortBufferUshort
ScsiPortReadPortUchar
ScsiPortWritePortUlong
ScsiPortWritePortUchar
ScsiPortWritePortUshort
ScsiPortReadPortUshort
ScsiPortNotification
ScsiPortGetPhysicalAddress
ScsiPortGetUncachedExtension
ScsiPortConvertUlongToPhysicalAddress
ScsiPortGetBusData
Sections
.text Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 450B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 768B - Virtual size: 678B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 920B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ