Static task
static1
Behavioral task
behavioral1
Sample
9e92b53dbbb6e49b2b954786bbf9f472c3b61b5a8eeed461a5afa8ce47feb17b_unpacked_x64.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9e92b53dbbb6e49b2b954786bbf9f472c3b61b5a8eeed461a5afa8ce47feb17b_unpacked_x64.exe
Resource
win10v2004-20220812-en
General
-
Target
9e92b53dbbb6e49b2b954786bbf9f472c3b61b5a8eeed461a5afa8ce47feb17b_unpacked_x64
-
Size
96KB
-
MD5
ebf057d67cbb0c8b144cb854e4141204
-
SHA1
1b1b881b9668f11fea525a848d1269eee9cf082d
-
SHA256
8e97041c113d9fd8969188c093e77f800dc417df2e2e10917d78f70498b2790f
-
SHA512
c003abafbf0c65268ec0e5f4acd4b9cf2f16945ba25156ac9623a4950ffb68e3f62c456f6dda28dca95e2d6ee5ed59ebd209f9109abaa52ecefa40d6a5da0af6
-
SSDEEP
1536:beCmWaQae/ybReenGt0MbwXUqyLLoBpDwRh73j6vOiLziiXpAhcV:MWHAejv1/hf62Uihu
Malware Config
Signatures
Files
-
9e92b53dbbb6e49b2b954786bbf9f472c3b61b5a8eeed461a5afa8ce47feb17b_unpacked_x64.exe windows x64
aa58070a3e429b4b29df6c693d370ac7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Imports
ntoskrnl.exe
ZwQuerySystemInformation
ExAllocatePool
Sections
.text Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 68KB - Virtual size: 259KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE