Static task
static1
Behavioral task
behavioral1
Sample
2b24356eabe28e700198adbb743c9de18d9d812ce882c236708197b0ea5a1c63.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2b24356eabe28e700198adbb743c9de18d9d812ce882c236708197b0ea5a1c63.exe
Resource
win10v2004-20220812-en
General
-
Target
2b24356eabe28e700198adbb743c9de18d9d812ce882c236708197b0ea5a1c63
-
Size
36KB
-
MD5
697e800e0b2a5ceeb7e123ede43dbd50
-
SHA1
1bec1f717ac155d3b4d35e3eb79e4385b7af4ca8
-
SHA256
2b24356eabe28e700198adbb743c9de18d9d812ce882c236708197b0ea5a1c63
-
SHA512
f9642b4c4c5234f8ff06c8223983284a9680f4a612f435b0118c8504263a9241d40656edfe9b02fdef5f93729b7076af92a1f6389d33d5f301c8522418438b44
-
SSDEEP
768:FZBv8ipJuY589pqxuQzKj/zo38XWxpyehCyhxIoaGRl83BE:FZiC2WKjJXPehDhxNbl8x
Malware Config
Signatures
Files
-
2b24356eabe28e700198adbb743c9de18d9d812ce882c236708197b0ea5a1c63.exe windows x86
e4788abd0873436e0a47d7fc91d5b247
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
ExInitializeZone
MmIsAddressValid
KeGetCurrentThread
ExFreePoolWithTag
RtlHashUnicodeString
ExAllocatePoolWithTag
KeGetRecommendedSharedDataAlignment
ZwDeleteKey
ExGetPreviousMode
KeTickCount
KeBugCheckEx
KeInitializeDpc
RtlInitUnicodeString
hal
KeGetCurrentIrql
Sections
.text Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 256B - Virtual size: 186B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 256B - Virtual size: 229B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 640B - Virtual size: 520B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ