Static task
static1
Behavioral task
behavioral1
Sample
5a9fa0cbf29c806a9725e257f19028632fe57283689a937a32b81bea7b5636dd_unpacked.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
5a9fa0cbf29c806a9725e257f19028632fe57283689a937a32b81bea7b5636dd_unpacked.exe
Resource
win10v2004-20220901-en
General
-
Target
5a9fa0cbf29c806a9725e257f19028632fe57283689a937a32b81bea7b5636dd_unpacked
-
Size
41KB
-
MD5
d0f05a446651cda6185f1df1b455b9c5
-
SHA1
5242c8d5a5871eadb937ae2dfb5965fb0a1665ec
-
SHA256
f17042e78da0746ae38b85b28fbf92ab8ae0db88a02d829f971562fc2c887ba6
-
SHA512
3e6343e1a45244201d5a65e4d2ceff37acdc80642469eeb3ba0c337356e56629c001365b6bd8f0290960fbf11c864243edc1fc2bc6644c75a23bfdb98ccc5f0a
-
SSDEEP
768:qPuKkMlo0kcfKHCE/iKSzvqLujQYdI+eBy/kY0e3PhqqnNVnIau:qyMSEebWvqLu/dbeBy/kY0M08VID
Malware Config
Signatures
Files
-
5a9fa0cbf29c806a9725e257f19028632fe57283689a937a32b81bea7b5636dd_unpacked.exe windows x86
135cb455f58db286bee7ef7a335c808c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
ntoskrnl.exe
KeWaitForSingleObject
IoDeleteDevice
ZwQuerySystemInformation
ExFreePool
KeReleaseMutex
RtlInitUnicodeString
IoCompleteRequest
IoCreateDevice
IoCreateSymbolicLink
ExAllocatePool
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE