Static task
static1
Behavioral task
behavioral1
Sample
0b952133d3dbc8793219212dfcdade6acdb41fe226b470d6e638a7fe0939b6b1.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
0b952133d3dbc8793219212dfcdade6acdb41fe226b470d6e638a7fe0939b6b1.exe
Resource
win10v2004-20221111-en
General
-
Target
0b952133d3dbc8793219212dfcdade6acdb41fe226b470d6e638a7fe0939b6b1
-
Size
8KB
-
MD5
d4ce38ff9a610df784ea067ad3f94f41
-
SHA1
3d50f45fe18f6d03d7abd80d928c5c122ff0aaab
-
SHA256
0b952133d3dbc8793219212dfcdade6acdb41fe226b470d6e638a7fe0939b6b1
-
SHA512
abeedb290f6e2d719220488cf5ffe92dc1299bf5708aebf245e78ba51a643a73d48d3dd7b800db4e0799bb181e63af6c4acc7183e26903406063f9c5f2d88773
-
SSDEEP
192:FWa96JlsEMkyppD5p3m+R6E3ycXKaBJ5rC:197EMppD5peSyKJbC
Malware Config
Signatures
Files
-
0b952133d3dbc8793219212dfcdade6acdb41fe226b470d6e638a7fe0939b6b1.exe windows x86
04eaeee95ba9fe7721097a9b8d728e30
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_WDM_DRIVER
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
IoAttachDeviceToDeviceStack
KeSetEvent
KeWaitForSingleObject
KeInitializeEvent
IofCompleteRequest
IoDeleteDevice
IoDetachDevice
IofCallDriver
IoCreateDevice
IoBuildDeviceIoControlRequest
InterlockedDecrement
InterlockedIncrement
ExFreePool
ExAllocatePoolWithTag
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 160B - Virtual size: 148B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 416B - Virtual size: 412B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 864B - Virtual size: 840B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 128B - Virtual size: 110B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ