Static task
static1
Behavioral task
behavioral1
Sample
5a9fa0cbf29c806a9725e257f19028632fe57283689a937a32b81bea7b5636dd_unpacked_x64.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
5a9fa0cbf29c806a9725e257f19028632fe57283689a937a32b81bea7b5636dd_unpacked_x64.exe
Resource
win10v2004-20220901-en
General
-
Target
5a9fa0cbf29c806a9725e257f19028632fe57283689a937a32b81bea7b5636dd_unpacked_x64
-
Size
64KB
-
MD5
aed29c5306f63ed2b8afbe2c3bb40231
-
SHA1
c03667f9af78dd6731fe0b2d625d742316e6664a
-
SHA256
74b3a3b4b8612323edac5f31a51910f83fdbc0ef8a438449e667c87e2494d06c
-
SHA512
a229bffc5b124d3acc50d46962b7a8697e0a5e20d39c3d4ee8367d318466e0304033b5eadcf6030664bf5b79d5d64aece5bbabc13c34e255a02b30b87f8fcbef
-
SSDEEP
1536:+ljcGToZqx8SOw7EA+juf3v5qZwPROQbSQd3g41I:NGU1SS3G5PROZQVgT
Malware Config
Signatures
Files
-
5a9fa0cbf29c806a9725e257f19028632fe57283689a937a32b81bea7b5636dd_unpacked_x64.exe windows x64
bd894c42fa6e6cd17752209c8fff2f27
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Imports
ntoskrnl.exe
ExAllocatePool
ZwQuerySystemInformation
Sections
.text Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 47KB - Virtual size: 143KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE