Static task
static1
Behavioral task
behavioral1
Sample
724f87f39cbff64ca8f254572b17f729352eb0646b6dc7167cfd66de34c15bf8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
724f87f39cbff64ca8f254572b17f729352eb0646b6dc7167cfd66de34c15bf8.exe
Resource
win10v2004-20220901-en
General
-
Target
724f87f39cbff64ca8f254572b17f729352eb0646b6dc7167cfd66de34c15bf8
-
Size
35KB
-
MD5
925113439c859a6ea0230e0a79ffe0be
-
SHA1
33fed1e6bc87772592ad0034109d606c920d632c
-
SHA256
724f87f39cbff64ca8f254572b17f729352eb0646b6dc7167cfd66de34c15bf8
-
SHA512
56d4e29144c86c1f94916f592885f81a050fe4d5b395d7a05eb20edbb4d08610c5f77567f135472ddea7b692b71e6bba213e177548d1c61fb031f20363c9a596
-
SSDEEP
768:A3yo0r0fbSDJPWP8QX7CPpIaPSn7WnbNzIE1QQNema:MuAP8QrEpLSn7WnbNIE1Fe
Malware Config
Signatures
Files
-
724f87f39cbff64ca8f254572b17f729352eb0646b6dc7167cfd66de34c15bf8.exe windows x86
0fa36e2f88eb52d1cd9f146d9e9817b4
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
ExFreePoolWithTag
ExGetPreviousMode
KeGetRecommendedSharedDataAlignment
RtlHashUnicodeString
KeGetCurrentThread
ZwDeleteKey
KeTickCount
KeBugCheckEx
MmIsAddressValid
ExInitializeZone
RtlInitUnicodeString
ExAllocatePoolWithTag
hal
KfReleaseSpinLock
KeGetCurrentIrql
KfAcquireSpinLock
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 256B - Virtual size: 202B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 256B - Virtual size: 253B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 640B - Virtual size: 546B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ