Static task
static1
Behavioral task
behavioral1
Sample
fcabfc70404fcf964dabed0c05295d8355b82487020f066ad9b2c6df6cb633b4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fcabfc70404fcf964dabed0c05295d8355b82487020f066ad9b2c6df6cb633b4.exe
Resource
win10v2004-20220812-en
General
-
Target
fcabfc70404fcf964dabed0c05295d8355b82487020f066ad9b2c6df6cb633b4
-
Size
265KB
-
MD5
42fa5effdf7cc127f4a6565b858c0fc4
-
SHA1
015c860a20e99da2a6074f5180a5005be4a366dd
-
SHA256
fcabfc70404fcf964dabed0c05295d8355b82487020f066ad9b2c6df6cb633b4
-
SHA512
d5b68d765d0dbddf6d49245a4b417d513186558a8ad5b1cc7fa880dfd4888193ef792ae5cf2d31618a18f4db6eafb11d00ef9628ff3b4e568c3263b50962df49
-
SSDEEP
3072:aZVtIQleiyni2Y0mI8ForMJKAoBE/tuCE8i:alIoEnyIrBEVuCI
Malware Config
Signatures
Files
-
fcabfc70404fcf964dabed0c05295d8355b82487020f066ad9b2c6df6cb633b4.exe windows x86
2ce0ebe4d999a07fc982008d654c3141
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
IoFreeMdl
MmUnmapLockedPages
ZwOpenProcess
DbgPrint
IofCompleteRequest
RtlAssert
MmMapLockedPages
MmBuildMdlForNonPagedPool
MmCreateMdl
KeServiceDescriptorTable
IoDeleteDevice
IoCreateSymbolicLink
IoCreateDevice
KeTickCount
Sections
.text Size: 1024B - Virtual size: 949B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 277B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 40B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 512B - Virtual size: 454B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 174B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ