Static task
static1
Behavioral task
behavioral1
Sample
304ca6df69e592e159a486a87c0f94f670e51bae8868f59a7b11c9402067986a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
304ca6df69e592e159a486a87c0f94f670e51bae8868f59a7b11c9402067986a.exe
Resource
win10v2004-20220812-en
General
-
Target
304ca6df69e592e159a486a87c0f94f670e51bae8868f59a7b11c9402067986a
-
Size
32KB
-
MD5
304adcfc4861baed5166eb56771de890
-
SHA1
b752f42bc2aa2ce364052d7cdf8388f351940c79
-
SHA256
304ca6df69e592e159a486a87c0f94f670e51bae8868f59a7b11c9402067986a
-
SHA512
b1a16c170b416d850dd43ead08facc3b5ba3dfa41984c795023dafa39bbf47b08a56333ed9d628981c5c2192b7536dc2a598f411ae2ce68b235b707792b14f8f
-
SSDEEP
768:2uElBRLx8yAzkABEG+rYZqqS0zK/OsN57edQ+H7:2xdnAwABE9YMqzzyHNdedQ+H7
Malware Config
Signatures
Files
-
304ca6df69e592e159a486a87c0f94f670e51bae8868f59a7b11c9402067986a.exe windows x86
b51d29b3530d25827573676942998e55
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
memcpy
ExFreePoolWithTag
ExAllocatePoolWithTag
ZwQuerySystemInformation
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 256B - Virtual size: 145B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 256B - Virtual size: 156B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 128B - Virtual size: 110B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ