Static task
static1
Behavioral task
behavioral1
Sample
d890d910308c5ba6ca38a246d6b5bf306a6ac6af570f463f25e51734024b8312.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d890d910308c5ba6ca38a246d6b5bf306a6ac6af570f463f25e51734024b8312.exe
Resource
win10v2004-20220812-en
General
-
Target
d890d910308c5ba6ca38a246d6b5bf306a6ac6af570f463f25e51734024b8312
-
Size
512KB
-
MD5
a29e452da245419aa400a917981be5a0
-
SHA1
eec53f2a2b4fb229e43c8b82fd436525fa02650e
-
SHA256
d890d910308c5ba6ca38a246d6b5bf306a6ac6af570f463f25e51734024b8312
-
SHA512
78b351ed66107ee77fa0ab264d35441cef4afeae6ea04c648ec2590570c6d5790b797f7690d6f5aac2231a34a0c315abc059049a0da4ad16acdc98ead7c4bf0d
-
SSDEEP
48:6cE0Jr29MqSbLdvt0SkXOZ83tzsTJjZni0QTkEl9UG7UtEl:m0VRxkXNQ1iRT9OBA
Malware Config
Signatures
Files
-
d890d910308c5ba6ca38a246d6b5bf306a6ac6af570f463f25e51734024b8312.exe windows x86
9195552aaab9c0cf05ebc7215fb54da9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
IoGetCurrentProcess
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 128B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 96B - Virtual size: 74B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
INIT Size: 96B - Virtual size: 84B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 96B - Virtual size: 78B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ