Static task
static1
Behavioral task
behavioral1
Sample
04ecf9b6baa8244930ed39679dfb1ad8d6e4126c7cf63748e289a52f5e81b1f3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
04ecf9b6baa8244930ed39679dfb1ad8d6e4126c7cf63748e289a52f5e81b1f3.exe
Resource
win10v2004-20220812-en
General
-
Target
04ecf9b6baa8244930ed39679dfb1ad8d6e4126c7cf63748e289a52f5e81b1f3
-
Size
4KB
-
MD5
4ac40267ad315c601fa35f1beb561dcb
-
SHA1
9b208c9536ec701920cd935ede1f0d9ae51b531c
-
SHA256
04ecf9b6baa8244930ed39679dfb1ad8d6e4126c7cf63748e289a52f5e81b1f3
-
SHA512
1d660871a7d4490f93a688846908443b8530bcb937650a8696daa98a6dea34a8cc0951883081481287a098b5597aa2d31389fe36127f11ac587f0a8f50322ff6
-
SSDEEP
96:7xBww/mj6y5nA3mlh1hcmADw1WWd4ZH7:7xiEeA3uA0kWWZ
Malware Config
Signatures
Files
-
04ecf9b6baa8244930ed39679dfb1ad8d6e4126c7cf63748e289a52f5e81b1f3.exe windows x86
dfd91ac6f100c03188a8a3f3778dd205
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
ExAllocatePoolWithTag
RtlWriteRegistryValue
ZwCreateFile
RtlAppendUnicodeToString
RtlIntegerToUnicodeString
ExFreePoolWithTag
videoprt.sys
VideoPortInitialize
VideoPortZeroMemory
Sections
.rdata Size: 128B - Virtual size: 111B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
PAGE Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
PAGE Size: 128B - Virtual size: 92B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 384B - Virtual size: 312B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 976B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 128B - Virtual size: 90B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ