Static task
static1
Behavioral task
behavioral1
Sample
d9015457053203e8ccc886744d8507f2a33256b64f9e8cd8b41ed502955b97bf.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d9015457053203e8ccc886744d8507f2a33256b64f9e8cd8b41ed502955b97bf.exe
Resource
win10v2004-20220812-en
General
-
Target
d9015457053203e8ccc886744d8507f2a33256b64f9e8cd8b41ed502955b97bf
-
Size
443KB
-
MD5
a15e6a71331622b2174c3b7026f96b89
-
SHA1
081ecc92e34ee45b3631b7379b91fb707105b304
-
SHA256
d9015457053203e8ccc886744d8507f2a33256b64f9e8cd8b41ed502955b97bf
-
SHA512
03901f46153e2a9598c4d09f214d47763a1f5ee35ceb1cb806d0decfc1695782ab19fd33190938153597b2eb0a307237d29fc5fe8f5283a84e68883b16efe178
-
SSDEEP
6144:xYvqrFqujdZIrMbA96Vid9szw77k6M8i1cES128JV3Lk1q13+pKSSFxi8d0Q7kTC:pbkJs0MO128JtpuY9ccSI8tAZH
Malware Config
Signatures
Files
-
d9015457053203e8ccc886744d8507f2a33256b64f9e8cd8b41ed502955b97bf.exe windows x86
4b83aae50e2e67d5014be126a21c1cc4
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
IoGetDiskDeviceObject
IoFreeIrp
InterlockedExchangeAdd
PsReturnPoolQuota
ExAllocatePoolWithTagPriority
PsChargeProcessPoolQuota
RtlCopyUnicodeString
RtlCompareUnicodeString
MmResetDriverPaging
Sections
.text Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 404B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.INIT Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 256B - Virtual size: 228B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ