Static task
static1
Behavioral task
behavioral1
Sample
9b9bb9c72644ae7eeb2a03537433845e058abd8f3bbfe7ba4607968597602381.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9b9bb9c72644ae7eeb2a03537433845e058abd8f3bbfe7ba4607968597602381.exe
Resource
win10v2004-20220812-en
General
-
Target
9b9bb9c72644ae7eeb2a03537433845e058abd8f3bbfe7ba4607968597602381
-
Size
20KB
-
MD5
42fc6525a8fb62da77254b5abbb615ac
-
SHA1
a3caaa2d7bf980c4b7f07c72830f17c3de3fb4e5
-
SHA256
9b9bb9c72644ae7eeb2a03537433845e058abd8f3bbfe7ba4607968597602381
-
SHA512
d8229e73cd9a84b5b06057b189ee917cf38143e4ac0026f41c3282684b3a0488c31283648f020f228db44ec112b46cb239748609ba468c9a8b6dba0954ad2d7f
-
SSDEEP
384:LGWQEAJicZOj/jhHQeJhVoMaH7UK+SjnjeIDDQJ8C3/db5Q:LdQEAn9eJfdwjniMCFtQ
Malware Config
Signatures
Files
-
9b9bb9c72644ae7eeb2a03537433845e058abd8f3bbfe7ba4607968597602381.exe windows x86
7c79fd10741b12275b66820da5bbeaa0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
scsiport.sys
ScsiPortReadPortUshort
ScsiPortReadPortUchar
ScsiPortWritePortUchar
ScsiPortWritePortBufferUshort
ScsiPortReadPortBufferUshort
ScsiPortWritePortUlong
ScsiPortReadPortUlong
ScsiPortWritePortUshort
ScsiPortNotification
ScsiPortStallExecution
ScsiPortMoveMemory
ScsiPortGetPhysicalAddress
ScsiPortInitialize
ScsiPortGetBusData
ScsiPortConvertUlongToPhysicalAddress
ScsiPortGetUncachedExtension
ScsiPortCompleteRequest
ScsiPortLogError
Sections
.text Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 672B - Virtual size: 659B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 736B - Virtual size: 720B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 640B - Virtual size: 610B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 896B - Virtual size: 880B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 672B - Virtual size: 672B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ