Static task
static1
Behavioral task
behavioral1
Sample
6b46f1f1bcf22c75cc402cf7e5808c7947a28ee5c1721a9cea449f7f323294fc.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6b46f1f1bcf22c75cc402cf7e5808c7947a28ee5c1721a9cea449f7f323294fc.exe
Resource
win10v2004-20220901-en
General
-
Target
6b46f1f1bcf22c75cc402cf7e5808c7947a28ee5c1721a9cea449f7f323294fc
-
Size
43KB
-
MD5
57541ba23bcbd1d523825c49deb56b68
-
SHA1
9696351d3e963d11a367ec4e75fc51285522a253
-
SHA256
6b46f1f1bcf22c75cc402cf7e5808c7947a28ee5c1721a9cea449f7f323294fc
-
SHA512
5a7981ead704074679799184c64114b0bc201ff202c3f9d5a0b5e6f2b629a9f46394e764a0c832bf3d4a32671abfa3707b34c7aed6bcf161a755ace703c72cf3
-
SSDEEP
384:1SWWCjRE8VpwL4Ns402VklISSU4f9PE8YPyeIndWd:UebpU46GV8If9TY6/w
Malware Config
Signatures
Files
-
6b46f1f1bcf22c75cc402cf7e5808c7947a28ee5c1721a9cea449f7f323294fc.exe windows x86
5f51a6390cb5c615b8b89ed7d450420c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
HalDispatchTable
ZwCreateTimer
hal
WRITE_PORT_UCHAR
IoSetPartitionInformation
HalReturnToFirmware
READ_PORT_BUFFER_USHORT
Sections
.text Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
INIT Size: 128B - Virtual size: 128B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 32B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 288B - Virtual size: 288B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ