Static task
static1
Behavioral task
behavioral1
Sample
18e836f694e34ef3caa7b3ab882b9c775a2ba174b717c2a074ade50aa513d98c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
18e836f694e34ef3caa7b3ab882b9c775a2ba174b717c2a074ade50aa513d98c.exe
Resource
win10v2004-20220812-en
General
-
Target
18e836f694e34ef3caa7b3ab882b9c775a2ba174b717c2a074ade50aa513d98c
-
Size
3KB
-
MD5
1c9c5b41b6cd5f4b04d2ea9432bc7b40
-
SHA1
daf814faf50cd2f95484fc6a2083cd4202e9f671
-
SHA256
18e836f694e34ef3caa7b3ab882b9c775a2ba174b717c2a074ade50aa513d98c
-
SHA512
494e0d0e2f489b3c3c6ecf788f67843d3ed2e604434a70529161c8f39e9f19afa3aeb8e47f87a39f3fcd580947812ebee702978eaa3e1e125d3c8b5651334ccd
Malware Config
Signatures
Files
-
18e836f694e34ef3caa7b3ab882b9c775a2ba174b717c2a074ade50aa513d98c.exe windows x86
d9c9c4541168665f44917e3ddc4a00d5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
DbgPrint
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 128B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 608B - Virtual size: 588B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 96B - Virtual size: 67B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
INIT Size: 96B - Virtual size: 74B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 32B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ