Static task
static1
Behavioral task
behavioral1
Sample
ce1e4c704786badbdc7715db594c1a58379d341c000516d0e43b1284b3f19aaf.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ce1e4c704786badbdc7715db594c1a58379d341c000516d0e43b1284b3f19aaf.exe
Resource
win10v2004-20220812-en
General
-
Target
ce1e4c704786badbdc7715db594c1a58379d341c000516d0e43b1284b3f19aaf
-
Size
6KB
-
MD5
5f70d3011617a8719e03ba4efd999ba8
-
SHA1
2a25f8cf8defd75540c000d5d86b3e0bfb555aad
-
SHA256
ce1e4c704786badbdc7715db594c1a58379d341c000516d0e43b1284b3f19aaf
-
SHA512
17dcd669fd39a6d324ea9be5411dd93049f79b332cf18416e1b6e51dfaa07a044213a0e23e6da190f487ef8e53ff3f263742b1e40eb39ab4d000a8a96fa8ef51
-
SSDEEP
48:qdKm5OVrqRUnekb6eqUWchqUWbQqJWP83tjGGdMdAgLixaRlLHE:SK9qhcohvMw1GGdAAgLiMv
Malware Config
Signatures
Files
-
ce1e4c704786badbdc7715db594c1a58379d341c000516d0e43b1284b3f19aaf.exe windows x86
0208c5ca49da14cc7bf399096456cce2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
KeTickCount
RtlWriteRegistryValue
videoprt.sys
VideoPortZeroMemory
VideoPortInitialize
Sections
.rdata Size: 512B - Virtual size: 95B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PAGE Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
PAGE Size: 512B - Virtual size: 88B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 512B - Virtual size: 262B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 120B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ