Static task
static1
Behavioral task
behavioral1
Sample
edca816d8463b7ca83cc57227038aae378f9e66d589c3a717a1efcaf43594484.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
edca816d8463b7ca83cc57227038aae378f9e66d589c3a717a1efcaf43594484.exe
Resource
win10v2004-20220901-en
General
-
Target
edca816d8463b7ca83cc57227038aae378f9e66d589c3a717a1efcaf43594484
-
Size
5KB
-
MD5
62a45ca40b557cad2111bcceb316d74f
-
SHA1
bcd37f4deda092ba065350344f357d5c1659bfe4
-
SHA256
edca816d8463b7ca83cc57227038aae378f9e66d589c3a717a1efcaf43594484
-
SHA512
4d4749d96efd4c4174185a2ac9d8fc215fafcd5303c3f588bdf3253de95393515e7f99f2c280b203ee533705f4bce7d93b37f9714aa27dd1b067f4fa937dde1a
-
SSDEEP
96:4jQtre4c/bva2ia8YxW/VvVgDT9DI+Dcw1pSCd5R:4YRwbS2P8YQdvqTxIaTr1DR
Malware Config
Signatures
Files
-
edca816d8463b7ca83cc57227038aae378f9e66d589c3a717a1efcaf43594484.exe windows x86
a53ad5063c464018b23c816559e6feb4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
KeBugCheckEx
KeTickCount
hal
WRITE_PORT_ULONG
READ_PORT_ULONG
pciidex.sys
PciIdeXGetBusData
PciIdeXInitialize
PciIdeXSetBusData
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 128B - Virtual size: 111B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 128B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 384B - Virtual size: 358B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 128B - Virtual size: 70B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ