Static task
static1
Behavioral task
behavioral1
Sample
cc9d7eb25cc7248b7ce60db787de12d1bdb01c8d7058f2cbff23224708423998.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
cc9d7eb25cc7248b7ce60db787de12d1bdb01c8d7058f2cbff23224708423998.exe
Resource
win10v2004-20221111-en
General
-
Target
cc9d7eb25cc7248b7ce60db787de12d1bdb01c8d7058f2cbff23224708423998
-
Size
66KB
-
MD5
378b377199f32fe33e05e52c0e8dbad4
-
SHA1
e11c3caf8b7c26cfa4e9725347ce09860b32e762
-
SHA256
cc9d7eb25cc7248b7ce60db787de12d1bdb01c8d7058f2cbff23224708423998
-
SHA512
baf09ebf3cbdc9906e3138ed8cbc7bba182540d6010adce0920ab0a86c284e0d1b8f2fd9f63808801be765963f34d807af4e85f17db827086634578652c6a828
-
SSDEEP
1536:AzYX4xxUh2XbFrnjF1sGC9+FUZmjvVmvHYSXHmV:AtLIgdnjFCa9mvHYSXHm
Malware Config
Signatures
Files
-
cc9d7eb25cc7248b7ce60db787de12d1bdb01c8d7058f2cbff23224708423998.exe windows x86
3510d02c6c392c7a5d3a208150ffbe41
Code Sign
73:33:e8:a4:92:71:79:43:b2:85:39:d1:df:a5:3a:9aCertificate
IssuerCN=EareawoaroNot Before09-07-2012 07:08Not After31-12-2039 23:59SubjectCN=Eareawoaro49:2b:25:12:e1:dd:83:b5:30:74:a8:18:20:0b:94:d3:6e:fe:26:85Signer
Actual PE Digest49:2b:25:12:e1:dd:83:b5:30:74:a8:18:20:0b:94:d3:6e:fe:26:85Digest Algorithmsha1PE Digest MatchestrueSignature Validations
TrustedfalseVerification
Signing CertificateCN=Eareawoaro17-11-2022 13:28 Valid: false
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
ZwFlushKey
ExAllocatePoolWithTag
PsProcessType
PsThreadType
KeTickCount
RtlUpperChar
Sections
.text Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 384B - Virtual size: 262B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ