Static task
static1
Behavioral task
behavioral1
Sample
cf0670964c187c64c2f2ab54ee2d8447105ca1011d3c4514d080e99f9bb5263b.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
cf0670964c187c64c2f2ab54ee2d8447105ca1011d3c4514d080e99f9bb5263b.exe
Resource
win10v2004-20220812-en
General
-
Target
cf0670964c187c64c2f2ab54ee2d8447105ca1011d3c4514d080e99f9bb5263b
-
Size
446KB
-
MD5
4e4d0e98ab2d339980578fb709ed37a0
-
SHA1
c121f0a4065d760ecfa7c9391e8233ef74207a7a
-
SHA256
cf0670964c187c64c2f2ab54ee2d8447105ca1011d3c4514d080e99f9bb5263b
-
SHA512
4c729023e3e5ba6b7219a348b9b6ee88dd1187943c8b07dd81504b9f218fbc22a6e2476d074f15faca46991b3719fa2d0970a63271579ef69d75fa14e0ba6964
-
SSDEEP
6144:acIu8/9u3xgp8ksBa7f8WpyV/SODtWNAmSj4/0ZmBRqrBjQPENjqYrLT/7lFFP:/I79uBkfg3V/SMtOAmSjaCmrQqgFT
Malware Config
Signatures
Files
-
cf0670964c187c64c2f2ab54ee2d8447105ca1011d3c4514d080e99f9bb5263b.exe windows x86
9da8ace8e81555b2cc9ffd659a7e8342
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
_alldiv
SeDeassignSecurity
RtlFreeOemString
RtlLargeIntegerNegate
RtlUpcaseUnicodeStringToOemString
DbgPrint
RtlAnsiStringToUnicodeString
RtlUnicodeStringToAnsiString
RtlOemStringToUnicodeString
RtlInitString
MmMapLockedPagesSpecifyCache
RtlAppendStringToString
RtlInitAnsiString
strchr
strncpy
KeCancelTimer
ZwClose
ZwCancelTimer
ZwSetTimer
ZwCreateTimer
_aulldiv
_allmul
IofCompleteRequest
IofCallDriver
IoBuildDeviceIoControlRequest
ObfReferenceObject
IoGetDeviceObjectPointer
RtlInitUnicodeString
Sections
.text Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 920B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 256B - Virtual size: 218B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.PAGE1 Size: 256B - Virtual size: 256B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE