Static task
static1
Behavioral task
behavioral1
Sample
d11f9575fe974716819e8d25777d3dcba6ad3f09626662a81960a52de9727aff.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d11f9575fe974716819e8d25777d3dcba6ad3f09626662a81960a52de9727aff.exe
Resource
win10v2004-20220812-en
General
-
Target
d11f9575fe974716819e8d25777d3dcba6ad3f09626662a81960a52de9727aff
-
Size
16KB
-
MD5
6b62b3a831aa41a7ea0e1f8766647330
-
SHA1
6a7298d2bc733d6ffb68b5026c2aa1f273fa825c
-
SHA256
d11f9575fe974716819e8d25777d3dcba6ad3f09626662a81960a52de9727aff
-
SHA512
d556beee2dfd824d3da9b3a3bc81250799f945649f85e22d9d74c5198e144cc9312d805207cd16f84a3400270a6f72e43f5644c3e9f71ec0f56b2923d6e48f11
-
SSDEEP
48:i2CtJLe3lFT5VWT6ucMHGNqnwi2LG9tPHe8wBtCKSeJY8JTa/wBrj1Aa4Z9n0AMv:go1CcHcV2stfTDw9f4Zh02pbU08UWH
Malware Config
Signatures
Files
-
d11f9575fe974716819e8d25777d3dcba6ad3f09626662a81960a52de9727aff.exe windows x86
a94f8faa78b398502ce6c362bc6011e0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
ZwClose
ZwTerminateProcess
ZwOpenProcess
ZwQuerySystemInformation
ExAllocatePoolWithTag
ExFreePoolWithTag
Sections
.rdata Size: 256B - Virtual size: 148B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
PAGE Size: 128B - Virtual size: 3B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
INIT Size: 512B - Virtual size: 502B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 128B - Virtual size: 36B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ