Static task
static1
Behavioral task
behavioral1
Sample
f6b642d04ac6c5296cda496a94ca4ca3b1de70e20dbbc41c20d96323ff381098.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f6b642d04ac6c5296cda496a94ca4ca3b1de70e20dbbc41c20d96323ff381098.exe
Resource
win10v2004-20220812-en
General
-
Target
f6b642d04ac6c5296cda496a94ca4ca3b1de70e20dbbc41c20d96323ff381098
-
Size
19KB
-
MD5
6cad9dd2916cb350bc92394f88994cf9
-
SHA1
811a7025999995a25277a20ae4e908babfb329f9
-
SHA256
f6b642d04ac6c5296cda496a94ca4ca3b1de70e20dbbc41c20d96323ff381098
-
SHA512
7500afa5d966dd2177bb4f2c9c3afce402840d7be279fe95b42dbe3069e34b954943a1e97043a5ae4f1c72c93b2036dc4e7cb9d5cdeddd8ccb22c38f56aa1415
-
SSDEEP
384:bzY0Vgd1RrKzBvlvSn8G6FuT+quHpBjbOjBMwzt8:bz/Vgd1gzHSuBxkMwzt8
Malware Config
Signatures
Files
-
f6b642d04ac6c5296cda496a94ca4ca3b1de70e20dbbc41c20d96323ff381098.exe windows x86
303c65bcd9f1158f3d59ab42242a5598
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ataport.sys
AtaPortNotification
AtaPortWritePortUchar
AtaPortWritePortUlong
AtaPortGetPhysicalAddress
AtaPortConvertPhysicalAddressToUlong
AtaPortGetScatterGatherList
AtaPortReadPortUchar
AtaPortStallExecution
AtaPortGetParentBusType
AtaPortRequestCallback
AtaPortWritePortBufferUshort
AtaPortGetUnCachedExtension
AtaPortCompleteRequest
AtaPortMoveMemory
AtaPortCompleteAllActiveRequests
AtaPortReleaseRequestSenseIrb
AtaPortBuildRequestSenseIrb
AtaPortReadPortUshort
AtaPortReadPortBufferUshort
AtaPortInitialize
AtaPortGetDeviceBase
AtaPortDeviceStateChange
ntoskrnl.exe
KeTickCount
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 174B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 1024B - Virtual size: 868B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1016B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 138B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ