Static task
static1
Behavioral task
behavioral1
Sample
207948bc9495ba2bf12de4dfceca64779a443b7e82ac4d4cc6dfe525dc9cea46.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
207948bc9495ba2bf12de4dfceca64779a443b7e82ac4d4cc6dfe525dc9cea46.exe
Resource
win10v2004-20220812-en
General
-
Target
207948bc9495ba2bf12de4dfceca64779a443b7e82ac4d4cc6dfe525dc9cea46
-
Size
68KB
-
MD5
96c0a7d0c9f03dbf583e53e04f409ede
-
SHA1
07d9db8d63ce2f4146c5dfbfee48ae5c1638ecc8
-
SHA256
207948bc9495ba2bf12de4dfceca64779a443b7e82ac4d4cc6dfe525dc9cea46
-
SHA512
3aa44e0d800ffb444f8f4da79583c077997c2785d69f1cbd15feb3805caa6fd818f5ce4d3161c98a29150dd01f8dce83395579ada20e44eb16ae9910c7911a79
-
SSDEEP
1536:Cn4PMXHCLzUJ6XCI5Qcge7przFJDlYwqC/SdCC6o2xb:hEXHtJ6XIcgcrzlYpC+CC6o2
Malware Config
Signatures
Files
-
207948bc9495ba2bf12de4dfceca64779a443b7e82ac4d4cc6dfe525dc9cea46.exe windows x86
1ff5819930c2e9d5389b6e7957298098
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
RtlHashUnicodeString
ExFreePoolWithTag
ExAllocatePoolWithTagPriority
IoReleaseCancelSpinLock
ExAcquireFastMutexUnsafe
KeEnterCriticalRegion
KeLeaveCriticalRegion
ExReleaseFastMutexUnsafe
WmiTraceMessage
IofCompleteRequest
ProbeForRead
IoCheckShareAccess
wcslen
ObfDereferenceObject
_except_handler3
ObReferenceObjectByHandle
IoAcquireCancelSpinLock
RtlCompareMemory
MmMapViewInSystemSpace
MmUnmapViewInSystemSpace
ExRaiseStatus
ExRaiseAccessViolation
MmUserProbeAddress
_purecall
Sections
.text Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 860B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.INIT Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 256B - Virtual size: 226B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ