Static task
static1
Behavioral task
behavioral1
Sample
661af6f601d6c43ded9ef5f8dbf5d2d0c39b6264428740aef0e762b21c9bb9e4.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
661af6f601d6c43ded9ef5f8dbf5d2d0c39b6264428740aef0e762b21c9bb9e4.exe
Resource
win10v2004-20220812-en
General
-
Target
661af6f601d6c43ded9ef5f8dbf5d2d0c39b6264428740aef0e762b21c9bb9e4
-
Size
6KB
-
MD5
d09f8db0aec0ec51b3d34d74a8536d87
-
SHA1
59e2e9765c17374d7014afa725dd7cd249b8998f
-
SHA256
661af6f601d6c43ded9ef5f8dbf5d2d0c39b6264428740aef0e762b21c9bb9e4
-
SHA512
40e80aaf0ff62a0a2adb4f237acd8e8a26e689da1f1cf4081cc9054230b7425f41c661c23b220d2fa0d9de6066b5bc038974f70e99ce1ab1dc6c004189f21379
-
SSDEEP
96:U1YLp9czYtAWaPNEWIe5EfE/Pusd4v8g1EHn1EkEQ:U1Y1ZanLI2PudBqn
Malware Config
Signatures
Files
-
661af6f601d6c43ded9ef5f8dbf5d2d0c39b6264428740aef0e762b21c9bb9e4.exe windows x86
08450bf8a3feabf942fc0d09997cdefd
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
memset
KeSetEvent
IoDeleteSymbolicLink
RtlInitUnicodeString
IofCompleteRequest
IofCallDriver
IoStartPacket
IoCreateDevice
KeWaitForSingleObject
KeInitializeEvent
IoDetachDevice
PoCallDriver
PoStartNextPowerIrp
IoCreateSymbolicLink
KeTickCount
IoAttachDeviceToDeviceStack
memmove
IoDeleteDevice
hal
KfLowerIrql
KfRaiseIrql
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 239B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 20B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 1024B - Virtual size: 914B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 896B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 214B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ