Static task
static1
Behavioral task
behavioral1
Sample
48402bcd37198ec157a5b4a9a7911340f9a2d021e7c1bc91b165a5c1d83ad2a1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
48402bcd37198ec157a5b4a9a7911340f9a2d021e7c1bc91b165a5c1d83ad2a1.exe
Resource
win10v2004-20220812-en
General
-
Target
48402bcd37198ec157a5b4a9a7911340f9a2d021e7c1bc91b165a5c1d83ad2a1
-
Size
159KB
-
MD5
147e83bc01d19b30e95ade94a82900c2
-
SHA1
be258824987567e592924f61f58d6c545088e9e3
-
SHA256
48402bcd37198ec157a5b4a9a7911340f9a2d021e7c1bc91b165a5c1d83ad2a1
-
SHA512
234ac2b02b3925a43da1ff88ec8f6137ef644f73784c4dbe677ed0b8da7fc7b08985482c3e85e6ba599edc22fd6a1b3dbc6bfc5d3bb378763af2f1d0d4dbb557
-
SSDEEP
3072:LIa6YNi78NTcn2DzxOpyveIn0C2cBaJFs0r9gkJKqDm+dXnBRjvt:LIaBNRNTzwA0C2c8J4f+VBRjv
Malware Config
Signatures
Files
-
48402bcd37198ec157a5b4a9a7911340f9a2d021e7c1bc91b165a5c1d83ad2a1.exe windows x86
c1e6060d69f919049aa66feab05981fc
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
ExFreePoolWithTag
RtlHashUnicodeString
ExAllocatePoolWithTagPriority
IoReleaseCancelSpinLock
ExAcquireFastMutexUnsafe
KeEnterCriticalRegion
KeLeaveCriticalRegion
ExReleaseFastMutexUnsafe
WmiTraceMessage
IofCompleteRequest
ProbeForRead
IoCheckShareAccess
wcslen
ObfDereferenceObject
_except_handler3
ObReferenceObjectByHandle
IoAcquireCancelSpinLock
RtlCompareMemory
MmMapViewInSystemSpace
MmUnmapViewInSystemSpace
ExRaiseStatus
ExRaiseAccessViolation
MmUserProbeAddress
_purecall
Sections
.text Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 860B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.INIT Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 256B - Virtual size: 230B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ