Static task
static1
Behavioral task
behavioral1
Sample
b7d845cc49f76403b3e0e95d5a2df4080a5bea50a43f1a5b6752d7371e84bc46.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b7d845cc49f76403b3e0e95d5a2df4080a5bea50a43f1a5b6752d7371e84bc46.exe
Resource
win10v2004-20220812-en
General
-
Target
b7d845cc49f76403b3e0e95d5a2df4080a5bea50a43f1a5b6752d7371e84bc46
-
Size
8KB
-
MD5
9689fab99c7fca7995b57e50cf3c78f7
-
SHA1
1852a2b68b2dcbc3e814aa542cb1592907be2c1d
-
SHA256
b7d845cc49f76403b3e0e95d5a2df4080a5bea50a43f1a5b6752d7371e84bc46
-
SHA512
921c77cfdb07f10f16609208d7326ea0832bdfe778cbd07a34d4c894dc23ee1ca044259d7d35f09c53f55c59e867a3df9dd6495151206e193b1178d713840193
-
SSDEEP
96:/S8/KbvbUtmSQ4l8oWn0MCXdLedMcQzys8tYA9sbxP6JFDYooQzA6MqV2LxA7Nf:/S0aInT2SCuGs8MbxP6QhM
Malware Config
Signatures
Files
-
b7d845cc49f76403b3e0e95d5a2df4080a5bea50a43f1a5b6752d7371e84bc46.exe windows x86
4d8f7a3314c2559bcdf06129d41adfee
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
RtlInitUnicodeString
IoDeleteDevice
IoDetachDevice
IoFreeMdl
IofCompleteRequest
IoGetRequestorProcessId
MmProbeAndLockPages
IoAttachDevice
IoDeleteSymbolicLink
IoCreateSymbolicLink
IoCreateDevice
IoAllocateMdl
IofCallDriver
ObReferenceObjectByHandle
ObfDereferenceObject
ExFreePoolWithTag
ExAllocatePool
MmMapLockedPagesSpecifyCache
MmUnlockPages
RtlCompareMemory
memcpy
hal
KfAcquireSpinLock
KfReleaseSpinLock
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 212B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
INIT Size: 1024B - Virtual size: 648B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 328B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ