Static task
static1
Behavioral task
behavioral1
Sample
3855665a858773b0150e8eb4bb23780ea121c92f21ea641aa7a8782af9e01fa1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3855665a858773b0150e8eb4bb23780ea121c92f21ea641aa7a8782af9e01fa1.exe
Resource
win10v2004-20220901-en
General
-
Target
3855665a858773b0150e8eb4bb23780ea121c92f21ea641aa7a8782af9e01fa1
-
Size
38KB
-
MD5
6a3713f5d8568463c53671c435041921
-
SHA1
f4cd0f8093b914a91cbe559841aded26c2d122e0
-
SHA256
3855665a858773b0150e8eb4bb23780ea121c92f21ea641aa7a8782af9e01fa1
-
SHA512
6a8860654b3b64414b87ba4e85cfb358b5036bdf754179b6cf4f334844dbdc54410c444f251395467e1a5aea7582c66798ce1337cde35ccc098a953a87459e48
-
SSDEEP
384:5Y6HumrYvrSJ+rErkwLw8DL34woqgK0BGpp8vkF:51OmrYDw+rErkwc8DLIwoqgKJp2kF
Malware Config
Signatures
Files
-
3855665a858773b0150e8eb4bb23780ea121c92f21ea641aa7a8782af9e01fa1.exe windows x86
f73b6f8f43291c6ab5ea3af4d3dd3b43
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
ZwWriteFile
ZwCreateFile
_vsnprintf
ZwDeleteFile
ZwClose
DbgPrint
ZwUnloadDriver
IofCompleteRequest
KeTickCount
ZwOpenFile
RtlInitUnicodeString
hal
KeGetCurrentIrql
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 256B - Virtual size: 168B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 512B - Virtual size: 412B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ