Static task
static1
Behavioral task
behavioral1
Sample
2c545d28b9406795998822bd98fcb49a71b9503a29c7dcfbcb5605c261d44b3e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2c545d28b9406795998822bd98fcb49a71b9503a29c7dcfbcb5605c261d44b3e.exe
Resource
win10v2004-20220812-en
General
-
Target
2c545d28b9406795998822bd98fcb49a71b9503a29c7dcfbcb5605c261d44b3e
-
Size
6KB
-
MD5
3ed0576854b3aedc48ed03bb81bd2690
-
SHA1
af2aeedb2779fe64c130b4a6dc7cc7741c5f0712
-
SHA256
2c545d28b9406795998822bd98fcb49a71b9503a29c7dcfbcb5605c261d44b3e
-
SHA512
14822ad94b227e3626d541ee4f676475d4d1d449d7a0e869a9562b44382edd1e1417c194822afb1e7da885353f07249e768a237b3231d35a17b54409a9acadd0
-
SSDEEP
48:qdKmUcE7qRUnekbGeqUWc2qUW0QqJiE83tEG7dMajv+alv+2E6vV:SKvehcFhMHweG7dNv322z
Malware Config
Signatures
Files
-
2c545d28b9406795998822bd98fcb49a71b9503a29c7dcfbcb5605c261d44b3e.exe windows x86
0208c5ca49da14cc7bf399096456cce2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
KeTickCount
RtlWriteRegistryValue
videoprt.sys
VideoPortZeroMemory
VideoPortInitialize
Sections
.rdata Size: 512B - Virtual size: 97B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PAGE Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
PAGE Size: 512B - Virtual size: 88B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 512B - Virtual size: 262B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 120B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ