Static task
static1
Behavioral task
behavioral1
Sample
ec6d359961badcc7133d7bba110701d7d653f4999c6c26471293313e5881b729.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ec6d359961badcc7133d7bba110701d7d653f4999c6c26471293313e5881b729.exe
Resource
win10v2004-20220901-en
General
-
Target
ec6d359961badcc7133d7bba110701d7d653f4999c6c26471293313e5881b729
-
Size
17KB
-
MD5
0262a28b1bc1e7323c3ad3530dd416ca
-
SHA1
53381410757631978e51905d2b634e086010a094
-
SHA256
ec6d359961badcc7133d7bba110701d7d653f4999c6c26471293313e5881b729
-
SHA512
0b6bb584b0af10d1bb8da1dbe963ec0f9dcf61a71fc034cdd11177b697ab20aeaa094702cb4b39935907ba54d44a48a39d1bc9ca0e86a4936677e00818e640f3
-
SSDEEP
384:uoenxfg1X9mXddT2MZouYjESev3YJLW7HbP6j9U:usvcT2fwjWLobPm9U
Malware Config
Signatures
Files
-
ec6d359961badcc7133d7bba110701d7d653f4999c6c26471293313e5881b729.exe windows x86
f9323e860f09db8cf9fb9490974ecd26
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
scsiport.sys
ScsiPortReadPortUchar
ScsiPortWritePortUchar
ScsiPortStallExecution
ScsiPortGetPhysicalAddress
ScsiPortNotification
ScsiPortMoveMemory
ScsiPortCompleteRequest
ScsiPortGetSrb
ScsiPortGetVirtualAddress
ScsiPortConvertUlongToPhysicalAddress
ScsiPortLogError
ScsiPortGetUncachedExtension
ScsiPortGetDeviceBase
ScsiPortValidateRange
ScsiPortInitialize
ntoskrnl.exe
memset
memcpy
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 384B - Virtual size: 267B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 256B - Virtual size: 129B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 640B - Virtual size: 570B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 384B - Virtual size: 318B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ