Static task
static1
Behavioral task
behavioral1
Sample
30defef876b5ed3612fa6efa21798613e98a0952c3e8fd02c447daea2c4cf863.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
30defef876b5ed3612fa6efa21798613e98a0952c3e8fd02c447daea2c4cf863.exe
Resource
win10v2004-20220812-en
General
-
Target
30defef876b5ed3612fa6efa21798613e98a0952c3e8fd02c447daea2c4cf863
-
Size
55KB
-
MD5
74bf36632ec8589bb0add1c62aed6de8
-
SHA1
57274163cf4e5e61823e012325e2ab8c81dbf799
-
SHA256
30defef876b5ed3612fa6efa21798613e98a0952c3e8fd02c447daea2c4cf863
-
SHA512
a33893c42412bb92ad5aa533edadc04e6eafa8ec9aa36ce706d1209f6c7412cd7e6bbb1266573137ca19ddf5c0c7e5962db41921d293fadb62f8cf97cf798a55
-
SSDEEP
1536:ZTc7P0jE7kOX3G7kwYX3AvUMa472qw2cNm:W7AE7f3iYX3AvUJ4aqw2O
Malware Config
Signatures
Files
-
30defef876b5ed3612fa6efa21798613e98a0952c3e8fd02c447daea2c4cf863.exe windows x86
7da7a20acf0285e70a19fa769c9a2033
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
scsiport.sys
ScsiPortGetDeviceBase
ScsiPortFreeDeviceBase
ScsiPortGetPhysicalAddress
ScsiPortReadPortUchar
ScsiPortReadPortUshort
ScsiPortReadPortUlong
ScsiPortReadPortBufferUchar
ScsiPortReadPortBufferUshort
ScsiPortReadPortBufferUlong
ScsiPortWritePortUchar
ScsiPortWritePortUshort
ScsiPortWritePortUlong
ScsiPortWritePortBufferUchar
ScsiPortWritePortBufferUshort
ScsiPortWritePortBufferUlong
ScsiPortNotification
ScsiPortGetBusData
ScsiPortSetBusDataByOffset
ScsiPortGetLogicalUnit
ScsiPortLogError
ScsiPortStallExecution
ScsiPortGetUncachedExtension
ScsiPortInitialize
Sections
.text Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 256B - Virtual size: 227B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 896B - Virtual size: 772B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1016B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 768B - Virtual size: 748B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ