Static task
static1
Behavioral task
behavioral1
Sample
e354af823b95ca6f6974c7e6187a6d0799900d30a4b5a4d9a2bace1586670636.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e354af823b95ca6f6974c7e6187a6d0799900d30a4b5a4d9a2bace1586670636.exe
Resource
win10v2004-20220812-en
General
-
Target
e354af823b95ca6f6974c7e6187a6d0799900d30a4b5a4d9a2bace1586670636
-
Size
27KB
-
MD5
a3c2d86f506a78517e4b623875d65f07
-
SHA1
543e898716d18852d44ff8fc9cf1724c8033a49f
-
SHA256
e354af823b95ca6f6974c7e6187a6d0799900d30a4b5a4d9a2bace1586670636
-
SHA512
1c58b0ba0fe42fa84696452b46e4c2f3895afb6fd9ea8c2bfb6f63b7ba012f00057a39cd4e1bf9e0b980c7b04b9f8e58825f2a353d54ba33bbf612a780fcccba
-
SSDEEP
768:q4JY5MzZg4zLjnYq0+6i6LOHmd9SBWfUyV15UCyBW:FJY5+fL0+61LTWsUQPUT
Malware Config
Signatures
Files
-
e354af823b95ca6f6974c7e6187a6d0799900d30a4b5a4d9a2bace1586670636.exe windows x86
7814e4ada31cd5115e04f92c58205e4e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
scsiport.sys
ScsiPortFreeDeviceBase
ScsiPortGetDeviceBase
ScsiPortConvertUlongToPhysicalAddress
ScsiPortMoveMemory
ScsiPortNotification
ScsiPortStallExecution
ScsiPortReadRegisterUchar
ScsiPortWriteRegisterUchar
ScsiPortWriteRegisterUlong
ScsiPortGetPhysicalAddress
ScsiPortCompleteRequest
ScsiPortGetVirtualAddress
ScsiPortReadRegisterUlong
ScsiPortLogError
ScsiPortReadRegisterBufferUchar
ScsiPortGetUncachedExtension
ScsiPortSetBusDataByOffset
ScsiPortGetBusData
ScsiPortInitialize
Sections
.text Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 224B - Virtual size: 208B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 672B - Virtual size: 656B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 992B - Virtual size: 992B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 576B - Virtual size: 554B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ