Static task
static1
Behavioral task
behavioral1
Sample
34002d834a1da9f4905a8bccf938025f1bb1f99ba4b1744f49d7b137303396d4.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
34002d834a1da9f4905a8bccf938025f1bb1f99ba4b1744f49d7b137303396d4.exe
Resource
win10v2004-20220812-en
General
-
Target
34002d834a1da9f4905a8bccf938025f1bb1f99ba4b1744f49d7b137303396d4
-
Size
6KB
-
MD5
038059d84d28b72b242a068f76140b40
-
SHA1
ed79f82066f8b551a0a3c2ff9ed3fcf6cda3ffa2
-
SHA256
34002d834a1da9f4905a8bccf938025f1bb1f99ba4b1744f49d7b137303396d4
-
SHA512
3fd9feb0b37759bbba82ca27031828d4e4eee9672bc092f9c488830cfa93a4c344eddae9040a7a23695631e814e028c33d8954457e0c3432f0d22b34f6b6d47f
-
SSDEEP
48:Qgeh8YhNDvvtkk2Fpl6DGIuMDxEPbCHXP5HnbkDVQjRVtPA2Oe0mhpKEO/IUH:Iqk2x6FuuxEuHiI3sef1Z
Malware Config
Signatures
Files
-
34002d834a1da9f4905a8bccf938025f1bb1f99ba4b1744f49d7b137303396d4.exe windows x86
e22dc5310db3b6bd2a308ea691646c31
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
RtlCompareString
RtlInitString
ZwClose
ZwMapViewOfSection
ZwCreateSection
ZwOpenFile
strchr
RtlFreeAnsiString
ObfDereferenceObject
RtlUnicodeStringToAnsiString
ObReferenceObjectByPointer
ObReferenceObjectByHandle
memcpy
KeServiceDescriptorTable
IofCompleteRequest
IoDeleteDevice
IoDeleteSymbolicLink
RtlInitUnicodeString
IoCreateSymbolicLink
IoCreateDevice
KeTickCount
KeBugCheckEx
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 384B - Virtual size: 334B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 128B - Virtual size: 36B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 768B - Virtual size: 656B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 256B - Virtual size: 170B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ