Static task
static1
Behavioral task
behavioral1
Sample
c8a42e0bfd685c8f67d191037dbf7e4cbb5c9bdf54ab448d8e6adfdaf9d7258c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c8a42e0bfd685c8f67d191037dbf7e4cbb5c9bdf54ab448d8e6adfdaf9d7258c.exe
Resource
win10v2004-20220812-en
General
-
Target
c8a42e0bfd685c8f67d191037dbf7e4cbb5c9bdf54ab448d8e6adfdaf9d7258c
-
Size
16KB
-
MD5
80caf126887be76e99a55e71fe4ef3cf
-
SHA1
9b0b3fd6300a948d22a6239c4ff4fdc8c6160bd5
-
SHA256
c8a42e0bfd685c8f67d191037dbf7e4cbb5c9bdf54ab448d8e6adfdaf9d7258c
-
SHA512
f5074ef84a9efe5befcdc1daaf0e206c377acea50d364d73178047b4c14573049432621788a35d6154f73b8fe82203542888d6da7e500cf1605c4549b8bbbb88
-
SSDEEP
192:Co90ie81um/tuiVKVJZnVtzcEWA1+eMT9bn1v/UHH2hl110W3K4f5+l3Xe9:fum/tuiVKVnnVt0lqHHsOW3Pf5+Fk
Malware Config
Signatures
Files
-
c8a42e0bfd685c8f67d191037dbf7e4cbb5c9bdf54ab448d8e6adfdaf9d7258c.exe windows x86
48a6d5568b5fcf2db308c5f2394ca547
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
MmGetSystemRoutineAddress
RtlFreeAnsiString
ObfDereferenceObject
KeServiceDescriptorTable
ExFreePoolWithTag
IofCompleteRequest
ProbeForWrite
ProbeForRead
IoDeleteDevice
IoDeleteSymbolicLink
IoCreateDevice
KeTickCount
KeBugCheckEx
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 384B - Virtual size: 272B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 128B - Virtual size: 36B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 512B - Virtual size: 442B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 256B - Virtual size: 170B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ