Static task
static1
Behavioral task
behavioral1
Sample
82fad7419c4585d2ef9c6873d1c0afa59e1d3a1ded313a97be3c2b33c01ca086.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
82fad7419c4585d2ef9c6873d1c0afa59e1d3a1ded313a97be3c2b33c01ca086.exe
Resource
win10v2004-20220812-en
General
-
Target
82fad7419c4585d2ef9c6873d1c0afa59e1d3a1ded313a97be3c2b33c01ca086
-
Size
183KB
-
MD5
a338a39ed00d1fdece4cd70e7012e311
-
SHA1
d1737d61a98f55d46d186e7137d065c0f2a248b6
-
SHA256
82fad7419c4585d2ef9c6873d1c0afa59e1d3a1ded313a97be3c2b33c01ca086
-
SHA512
00d23b881117975e9b9fcefe3a599602c2bc05e9a011d28c55aa87d290c2bf5923834c3168d2f1712a684e25a43d720687b53c9183666d6062291ca369d0c818
-
SSDEEP
3072:4orB+GiCdioppVlkjRlvRJ4//E+7mslheiHsI/U+owztYcemkZq9lz7VOfy+1iVI:4orgT2/IXZJ4nE+a6hgiU+dOmaq9lz7Q
Malware Config
Signatures
Files
-
82fad7419c4585d2ef9c6873d1c0afa59e1d3a1ded313a97be3c2b33c01ca086.exe windows x86
ddf97d317ffda502d53ae4f61f7a4ee2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
RtlGetGroupSecurityDescriptor
IoFreeIrp
InterlockedExchangeAdd
PsReturnPoolQuota
ExAllocatePoolWithTagPriority
PsChargeProcessPoolQuota
RtlCopyUnicodeString
Sections
.text Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 348B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.INIT Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 256B - Virtual size: 222B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ