Static task
static1
Behavioral task
behavioral1
Sample
c242ae9f21fe7fbc269bd11bdd3346936626da15596561b527ef20cfaef77055.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c242ae9f21fe7fbc269bd11bdd3346936626da15596561b527ef20cfaef77055.exe
Resource
win10v2004-20221111-en
General
-
Target
c242ae9f21fe7fbc269bd11bdd3346936626da15596561b527ef20cfaef77055
-
Size
24KB
-
MD5
950cc1e6ae3a6cd23e0945cde089b02c
-
SHA1
e5a2681d19eb0b054ba551100055af0ccc159015
-
SHA256
c242ae9f21fe7fbc269bd11bdd3346936626da15596561b527ef20cfaef77055
-
SHA512
b2f7ea734f974b5d8290ac07181f4c39c171f19983ed18b09da25c5acbb73f5a2d92e6ca4a14650b1baccffbc553dd40e57c4c3f25973fb4be7475df615af939
-
SSDEEP
768:SyEmOKaXjhxc1GxjaMSTo+XOCmgbkTuSjSvY+onxOKsqWsd1KYfsrlYbM7rhIQd4:SyEmOKazrNmFo+F9fwxG+aIsrlYChIQm
Malware Config
Signatures
Files
-
c242ae9f21fe7fbc269bd11bdd3346936626da15596561b527ef20cfaef77055.exe windows x86
f90922987e1d1292944c7125e5394170
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
MmUnlockPages
IoFreeMdl
MmProbeAndLockPages
IoAllocateMdl
KeQuerySystemTime
IoBuildPartialMdl
RtlCompareUnicodeString
MmUnmapLockedPages
KeTickCount
RtlUnwind
RtlCopyUnicodeString
KeBugCheckEx
memcpy
memset
ExFreePoolWithTag
_allmul
ExAllocatePoolWithTag
wdfldr.sys
WdfVersionBindClass
WdfVersionBind
WdfVersionUnbind
WdfVersionUnbindClass
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 788B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PAGE Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
INIT Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 880B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ