Static task
static1
Behavioral task
behavioral1
Sample
7c013de985a59d2d76603d3349bce85804f6a9b96d3c367c8fe138604a330718.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7c013de985a59d2d76603d3349bce85804f6a9b96d3c367c8fe138604a330718.exe
Resource
win10v2004-20220901-en
General
-
Target
7c013de985a59d2d76603d3349bce85804f6a9b96d3c367c8fe138604a330718
-
Size
6KB
-
MD5
07826cd05894df4faa3a244f74449ca6
-
SHA1
566ead7f1642a2615d1156d24cd19ffedd482589
-
SHA256
7c013de985a59d2d76603d3349bce85804f6a9b96d3c367c8fe138604a330718
-
SHA512
3189176ec33b5e99920c7412c943a06c431ce1268e622405189bd72b6321e128f951b9a7d74aba972e3c6abc629a2a7885b9fe0518b46307ffcdba5e639a1284
-
SSDEEP
48:QgehVCJ67kmcCxV36DADiE78UvYTWH3icxHngNwciOyVQaRbt0XAZlke0mhpKEOl:KYmco6IiE7Z20uNwcPAzPCef1cK
Malware Config
Signatures
Files
-
7c013de985a59d2d76603d3349bce85804f6a9b96d3c367c8fe138604a330718.exe windows x86
9e6c6f881f4642374a8b955fc80c5c73
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
RtlCompareString
RtlInitString
ZwClose
ZwMapViewOfSection
ZwCreateSection
ZwOpenFile
RtlInitUnicodeString
strchr
RtlFreeAnsiString
ObfDereferenceObject
RtlUnicodeStringToAnsiString
ObReferenceObjectByPointer
ObReferenceObjectByHandle
memcpy
KeServiceDescriptorTable
IofCompleteRequest
IoDeleteDevice
IoDeleteSymbolicLink
IoCreateSymbolicLink
IoCreateDevice
KeTickCount
KeBugCheckEx
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 384B - Virtual size: 301B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 128B - Virtual size: 36B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 768B - Virtual size: 656B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 256B - Virtual size: 170B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ