Static task
static1
Behavioral task
behavioral1
Sample
28a29bc575bf2dfe621fbc36f3e80a88bf8503f9c7c8230ac3ea0808eeb81441.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
28a29bc575bf2dfe621fbc36f3e80a88bf8503f9c7c8230ac3ea0808eeb81441.exe
Resource
win10v2004-20220901-en
General
-
Target
28a29bc575bf2dfe621fbc36f3e80a88bf8503f9c7c8230ac3ea0808eeb81441
-
Size
22KB
-
MD5
403e5b0a52fd93e82b50f33a10717124
-
SHA1
0919d2aeb3ea154a7a414700ea5af79112b4749e
-
SHA256
28a29bc575bf2dfe621fbc36f3e80a88bf8503f9c7c8230ac3ea0808eeb81441
-
SHA512
f2beac1f16f3f31839d5a00eefbfaafbd754f3c4b66bdf39ebc3d8e6c7001e880ad84259386a0773bffe01835d921c9ebf5f13aaa508ccb35d4ba546281bb01c
-
SSDEEP
384:0Y04cWYLwWgL/USBZYQ5kHQ7BhgFf9oESzHqP2xSOJ64wCdJX2139alXn0HLoJl6:DOK0w7TEf9oPm2xSOJ64wUJX2Ul30roe
Malware Config
Signatures
Files
-
28a29bc575bf2dfe621fbc36f3e80a88bf8503f9c7c8230ac3ea0808eeb81441.exe windows x86
556f66eecd31a12a766415046a77e3be
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
IoAttachDeviceToDeviceStack
IoCreateDevice
IofCallDriver
IoDeleteDevice
IoDetachDevice
IofCompleteRequest
PoCallDriver
PoStartNextPowerIrp
PoSetPowerState
Sections
.text Size: 128B - Virtual size: 30B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 128B - Virtual size: 112B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
PAGE Size: 512B - Virtual size: 397B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
INIT Size: 384B - Virtual size: 328B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vhze Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 984B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 128B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ