Static task
static1
Behavioral task
behavioral1
Sample
3dba6ce3fd1030388b7f769ae443d2e9fc0c78c3bc080c030556a7d50f47e55d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3dba6ce3fd1030388b7f769ae443d2e9fc0c78c3bc080c030556a7d50f47e55d.exe
Resource
win10v2004-20221111-en
General
-
Target
3dba6ce3fd1030388b7f769ae443d2e9fc0c78c3bc080c030556a7d50f47e55d
-
Size
44KB
-
MD5
26b76b32bf2fa1e5606eca914d1b39db
-
SHA1
7de5ac19be34c24daafd8a6aaa4d43e97acdf0f1
-
SHA256
3dba6ce3fd1030388b7f769ae443d2e9fc0c78c3bc080c030556a7d50f47e55d
-
SHA512
c6865146da73eaf7e67b2208039cca913ca91500de18bb053b0c2cc0f7bd1a615601673b5bc9c2400b6af01aa825cb7499d552205766732706eea9f01982258d
-
SSDEEP
768:es8QxetCwvUmmUGMoGNzP50NqJjoxFmWByCEQriLfsbD1M2mLgHqaYgvEw/g7m7v:es8QxetCwvUmHGMNzP5SqJjoxFmWByCl
Malware Config
Signatures
Files
-
3dba6ce3fd1030388b7f769ae443d2e9fc0c78c3bc080c030556a7d50f47e55d.exe windows x86
b860123f032dfe815b912055a1c6642d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
RtlAppendUnicodeToString
ExRaiseStatus
ExAllocatePool
DbgPrint
RtlAssert
ZwDeleteFile
RtlCheckRegistryKey
memset
KeTickCount
KeBugCheckEx
RtlUnwind
ZwUnloadDriver
ExFreePoolWithTag
hal
KeGetCurrentIrql
Sections
.text Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 416B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 512B - Virtual size: 460B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ