Static task
static1
Behavioral task
behavioral1
Sample
787451669850b6f7bdb1db349c2a12b8a0a6c218a53be98de61ab38871feae98.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
787451669850b6f7bdb1db349c2a12b8a0a6c218a53be98de61ab38871feae98.exe
Resource
win10v2004-20220812-en
General
-
Target
787451669850b6f7bdb1db349c2a12b8a0a6c218a53be98de61ab38871feae98
-
Size
11KB
-
MD5
0b6c6b4801549c28b062729e194131a4
-
SHA1
715a6d2f78c67a781944af0fdf215b1a45e299ae
-
SHA256
787451669850b6f7bdb1db349c2a12b8a0a6c218a53be98de61ab38871feae98
-
SHA512
d727f33c6339444e903e0b7f52fc832a90dfb1a43047fb6367cf3c8d438eb20dd166a4c928d0de3c6661bb34df1f9426e15bb3154ae0364373f25632c54b4298
-
SSDEEP
192:JlxS2tUZl301DjseUq1GBChRZEw6pCTO4IygTqmGQck4Z3RQ3gZvH/:02UHStUxaEwjq4vmGf4A/
Malware Config
Signatures
Files
-
787451669850b6f7bdb1db349c2a12b8a0a6c218a53be98de61ab38871feae98.exe windows x86
fbf038c46ef3b61675974fced48f77f3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
IoBuildSynchronousFsdRequest
KeInitializeEvent
IoBuildDeviceIoControlRequest
KeSetEvent
KeInitializeSpinLock
IoCreateDevice
RtlInitUnicodeString
KeInitializeDpc
KeInitializeTimer
IofCallDriver
IoAllocateIrp
IoAttachDeviceToDeviceStack
IoWriteErrorLogEntry
IoAllocateErrorLogEntry
KeCancelTimer
KeSetTimer
ExfInterlockedRemoveHeadList
ExAllocatePoolWithTag
PoStartNextPowerIrp
PoCallDriver
IofCompleteRequest
MmLockPagableDataSection
IoFreeIrp
KeWaitForSingleObject
ExFreePool
IoDeleteDevice
InterlockedExchange
MmUnlockPagableImageSection
hal
KeStallExecutionProcessor
KfAcquireSpinLock
WRITE_PORT_UCHAR
KfReleaseSpinLock
READ_PORT_UCHAR
KeQueryPerformanceCounter
oprghdlr.sys
RegisterOpRegionHandler
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 399B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 256B - Virtual size: 172B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PAGE Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
INIT Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 402B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ