Static task
static1
Behavioral task
behavioral1
Sample
46d684a770d271b12fd88620e2bf9e3ae827986a9f614245cf0f9aba19a97566.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
46d684a770d271b12fd88620e2bf9e3ae827986a9f614245cf0f9aba19a97566.exe
Resource
win10v2004-20220812-en
General
-
Target
46d684a770d271b12fd88620e2bf9e3ae827986a9f614245cf0f9aba19a97566
-
Size
5KB
-
MD5
66e64136c1608afe0ec8d2ae075fc7c0
-
SHA1
66b3dd38e07d4b2cb10ebcacfc0710cc59396af0
-
SHA256
46d684a770d271b12fd88620e2bf9e3ae827986a9f614245cf0f9aba19a97566
-
SHA512
4689fccf59405edb5b91216fcbbd9c2ce62b4abb0cd9ea045e76795eea1ef5ddfb6c558107f2f040c4061a082d27bc3c10643b8946b235757a86204db82e759e
-
SSDEEP
48:q9e7lWOspiNkN9s5thSvNvhSvNjhSvNWhSvN6phSvN6ORhSvN6Oo:KfpiNkN9sY8I/6G6Ou6Oo
Malware Config
Signatures
Files
-
46d684a770d271b12fd88620e2bf9e3ae827986a9f614245cf0f9aba19a97566.exe windows x86
36c05033539754118c1663260320b125
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
ZwDeleteKey
ZwOpenKey
RtlInitUnicodeString
memset
KeTickCount
KeBugCheckEx
ZwClose
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 512B - Virtual size: 266B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 98B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ