Static task
static1
Behavioral task
behavioral1
Sample
57db4c9540a665fdbcfa094afe133cee63f91c5c48425742d0f24f9696eef9fa.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
57db4c9540a665fdbcfa094afe133cee63f91c5c48425742d0f24f9696eef9fa.exe
Resource
win10v2004-20220812-en
General
-
Target
57db4c9540a665fdbcfa094afe133cee63f91c5c48425742d0f24f9696eef9fa
-
Size
16KB
-
MD5
0eea671e6b1a3aaa76c4629f7debf23c
-
SHA1
b6bb7a5ce7d3d7c71c6306824661d3795557e6a0
-
SHA256
57db4c9540a665fdbcfa094afe133cee63f91c5c48425742d0f24f9696eef9fa
-
SHA512
c8f3ace2271cd6576b43efa43250e2dbef242750e187340620300326f32f8514f133787e96af1ca914a2030965e67b187d116c842536bc22e7e3b26b19490352
-
SSDEEP
384:6oXalDzYgEjWes+WUhy/jso9uT+quEOjBM2l:RXWFGy/jso5zMw
Malware Config
Signatures
Files
-
57db4c9540a665fdbcfa094afe133cee63f91c5c48425742d0f24f9696eef9fa.exe windows x86
40136425a18ea8e7620847b372ff06a7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
pciidex.sys
PciIdeXSetBusData
PciIdeXInitialize
PciIdeXGetBusData
Sections
.text Size: 896B - Virtual size: 842B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 128B - Virtual size: 79B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 128B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 128B - Virtual size: 128B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 128B - Virtual size: 30B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ