Static task
static1
Behavioral task
behavioral1
Sample
092a880a1a0472ed500e35ce52fafe401d23d716676a6841eaf94754ec8aa5fe.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
092a880a1a0472ed500e35ce52fafe401d23d716676a6841eaf94754ec8aa5fe.exe
Resource
win10v2004-20220812-en
General
-
Target
092a880a1a0472ed500e35ce52fafe401d23d716676a6841eaf94754ec8aa5fe
-
Size
24KB
-
MD5
752c77c4418eba240b2f9adfb343d8a0
-
SHA1
5f71c48f84d451fca5430bab2675221b594f2349
-
SHA256
092a880a1a0472ed500e35ce52fafe401d23d716676a6841eaf94754ec8aa5fe
-
SHA512
9fbfdbba4efbb8b3c01eb131acc3d45c1ff108f52f671bd94793cfc395b7a36a09356955fda069721e083f910afd4f1c311238bf0437734c03946fc308af1256
-
SSDEEP
768:BKmUA+jmGt+ncB5gM1H0eemjT6F6a4Ix:BKmUdjmGCcB5g8H0eXM4I
Malware Config
Signatures
Files
-
092a880a1a0472ed500e35ce52fafe401d23d716676a6841eaf94754ec8aa5fe.exe windows x86
856007b2211b19cbf25db600e494508d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
RtlUnicodeStringToInteger
ExFreePoolWithTag
ExAllocatePoolWithTag
KeTickCount
RtlInitUnicodeString
NtQuerySystemInformation
hal
KeGetCurrentIrql
KfLowerIrql
KfRaiseIrql
Sections
.text Size: 384B - Virtual size: 272B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 128B - Virtual size: 44B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 384B - Virtual size: 296B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 992B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 256B - Virtual size: 142B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ