Static task
static1
Behavioral task
behavioral1
Sample
6fc81c2ec08a74773f508093cf7fce15a3a7c7cf8ec2244bdf88f28bece99508.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6fc81c2ec08a74773f508093cf7fce15a3a7c7cf8ec2244bdf88f28bece99508.exe
Resource
win10v2004-20220812-en
General
-
Target
6fc81c2ec08a74773f508093cf7fce15a3a7c7cf8ec2244bdf88f28bece99508
-
Size
17KB
-
MD5
78f260ffc6ddd0f4abc017f70cb76447
-
SHA1
21d7d0155970ff4133a335f946c9f114d8703f91
-
SHA256
6fc81c2ec08a74773f508093cf7fce15a3a7c7cf8ec2244bdf88f28bece99508
-
SHA512
0ae122bae6f367e76deb5c8974cc2b474bf62ef740660488c634f3f8f97bf5b72b9cb382515bf43269fd04897989b562ed0daa6054d716399d1c918a53905ef5
-
SSDEEP
192:441fZjhXek50L4NqhQdB/XOLR93yZDgdZHLTzJxWbhg+l6PbDv/z0NpZMY+h:4CBZFNJ/QbLJySoq//R
Malware Config
Signatures
Files
-
6fc81c2ec08a74773f508093cf7fce15a3a7c7cf8ec2244bdf88f28bece99508.exe windows x86
c0a356ab56d051e58e72421179fddb45
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
RtlInitUnicodeString
IoDeleteSymbolicLink
IofCompleteRequest
IoCreateDevice
IoGetCurrentProcess
KeTickCount
IoCreateSymbolicLink
RtlAssert
IoDeleteDevice
hal
KfLowerIrql
KfRaiseIrql
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 384B - Virtual size: 288B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 128B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 512B - Virtual size: 420B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 128B - Virtual size: 124B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ