Static task
static1
Behavioral task
behavioral1
Sample
64597f7511de8bc12bb963677bb1fa599401cdc7924b59d1cf5d63183d1cc540.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
64597f7511de8bc12bb963677bb1fa599401cdc7924b59d1cf5d63183d1cc540.exe
Resource
win10v2004-20220812-en
General
-
Target
64597f7511de8bc12bb963677bb1fa599401cdc7924b59d1cf5d63183d1cc540
-
Size
42KB
-
MD5
69056d0561d482b5dca3be0069bb9010
-
SHA1
73c1850b135b573a2db8f586e9c0e645272ca923
-
SHA256
64597f7511de8bc12bb963677bb1fa599401cdc7924b59d1cf5d63183d1cc540
-
SHA512
d4d4cf1810d5c7458725c34a2554365a301881b271ddbe33fbb3b945dce423c7b1ac5f11a6ec54fe6bc54b7814ce1a95813a0f193db99f119afdd67be8752a91
-
SSDEEP
192:dWz7rTZUxiuGyiXND3pX/pKsveEL88AQBZ/hVzl7mAJN9l/fDFc0KdwrcZhUnB1:c7rFGGPXNDhxKGrAQBZX5mAfxidw8Sn
Malware Config
Signatures
Files
-
64597f7511de8bc12bb963677bb1fa599401cdc7924b59d1cf5d63183d1cc540.exe windows x86
8c240f58a3cf9a6a0ee3a4286021ab36
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
hal
ExAcquireFastMutex
HalSetBusData
KeRaiseIrqlToDpcLevel
READ_PORT_USHORT
WRITE_PORT_ULONG
HalAllocateAdapterChannel
READ_PORT_BUFFER_USHORT
IoFreeAdapterChannel
WRITE_PORT_UCHAR
READ_PORT_ULONG
READ_PORT_BUFFER_USHORT
KeStallExecutionProcessor
HalAllProcessorsStarted
KeTryToAcquireQueuedSpinLockRaiseToSynch
HalSetDisplayParameters
WRITE_PORT_BUFFER_UCHAR
HalGetAdapter
HalStartNextProcessor
KeReleaseQueuedSpinLock
READ_PORT_USHORT
KeReleaseQueuedSpinLock
KeAcquireSpinLock
HalAllProcessorsStarted
HalGetBusDataByOffset
IoWritePartitionTable
KeAcquireQueuedSpinLockRaiseToSynch
HalStartProfileInterrupt
IoFreeMapRegisters
IoMapTransfer
KdComPortInUse
HalGetEnvironmentVariable
KeRaiseIrqlToSynchLevel
HalAcquireDisplayOwnership
HalEndSystemInterrupt
READ_PORT_BUFFER_UCHAR
Sections
INIT Size: 39KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 128B - Virtual size: 128B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 32B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ