Static task
static1
Behavioral task
behavioral1
Sample
070f5681cb55ae6be8d5cbc4142553c709b8f93747953fb24496c992edf7a131.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
070f5681cb55ae6be8d5cbc4142553c709b8f93747953fb24496c992edf7a131.exe
Resource
win10v2004-20220812-en
General
-
Target
070f5681cb55ae6be8d5cbc4142553c709b8f93747953fb24496c992edf7a131
-
Size
8KB
-
MD5
306818180a717e46745e2d7ffae11803
-
SHA1
b8c044b77e02f925abb9ab0952116286f624e04b
-
SHA256
070f5681cb55ae6be8d5cbc4142553c709b8f93747953fb24496c992edf7a131
-
SHA512
33432c54d9b6378a8be26e8fcf9166c4fc8454440e03bb44c600a9810de9ddbd791156d0ca553e7cbec2406a81aa25b348f5bbd687b4dcac86a20d29345fee93
-
SSDEEP
192:TdohTkKgybugqJ4DLaHTMf+4I7ZoKxLEL:ChLbug1XJm4WlO
Malware Config
Signatures
Files
-
070f5681cb55ae6be8d5cbc4142553c709b8f93747953fb24496c992edf7a131.exe windows x86
b7a9ada452380dbef2c10f17db0ca25c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
RtlInitUnicodeString
_except_handler3
IoCreateFile
IoFreeIrp
KeSetEvent
KeWaitForSingleObject
IofCallDriver
KeGetCurrentThread
KeInitializeEvent
ObfDereferenceObject
IoAllocateIrp
IoGetRelatedDeviceObject
ObReferenceObjectByHandle
IoFileObjectType
MmGetSystemRoutineAddress
RtlFreeUnicodeString
RtlAnsiStringToUnicodeString
RtlInitAnsiString
IofCompleteRequest
ZwClose
KeServiceDescriptorTable
DbgPrint
IoDeleteDevice
IoDeleteSymbolicLink
IoCreateSymbolicLink
IoCreateDevice
KeTickCount
KeBugCheckEx
wcslen
hal
KeGetCurrentIrql
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 452B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 896B - Virtual size: 890B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 384B - Virtual size: 276B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ