Static task
static1
Behavioral task
behavioral1
Sample
36e024c93eac1227fe1a3f6e62fa0a9a81385c47bb54a2a4685cdefa91893d8f.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
36e024c93eac1227fe1a3f6e62fa0a9a81385c47bb54a2a4685cdefa91893d8f.exe
Resource
win10v2004-20220901-en
General
-
Target
36e024c93eac1227fe1a3f6e62fa0a9a81385c47bb54a2a4685cdefa91893d8f
-
Size
102KB
-
MD5
a07c0c8d4b7d21a4d5fc0ff5bb418750
-
SHA1
d0bd78aee0136f643f15f27968c30a8e56c3175b
-
SHA256
36e024c93eac1227fe1a3f6e62fa0a9a81385c47bb54a2a4685cdefa91893d8f
-
SHA512
eca57ca23394e43bfc89de2059233afafc78010c45719f0a8434e17ed71590dc019d514919fd88ddd37d545351e28803f4b4777f6996c9e356ffb55c4a4250ea
-
SSDEEP
1536:5moYi9QTT4j6KikPYL3TAG43ay8ocefTXH:/9nri3vSceLX
Malware Config
Signatures
Files
-
36e024c93eac1227fe1a3f6e62fa0a9a81385c47bb54a2a4685cdefa91893d8f.exe windows x86
00ea2dd7e235ca5bb849847004854e99
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
KeServiceDescriptorTable
ObReferenceObjectByHandle
RtlInitUnicodeString
PsGetVersion
MmGetSystemRoutineAddress
RtlCompareMemory
PsLookupProcessByProcessId
DbgPrint
IoAllocateMdl
MmProbeAndLockPages
IoFreeMdl
ExAllocatePool
WRITE_PORT_UCHAR
Sections
ak++R)$H Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
btr7B/gl Size: - Virtual size: 44B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
eu#*xE+i Size: - Virtual size: 256KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
o41sY5md Size: - Virtual size: 344B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
s=Ac\9@. Size: - Virtual size: 968B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
!.\u[Nq_ Size: - Virtual size: 79KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
"LiD_W]0 Size: 101KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
/c,Xg]<1 Size: 512B - Virtual size: 52B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ