Static task
static1
Behavioral task
behavioral1
Sample
ad348e7512718f254f3e6e015e65794cf1307d870ad3d8294d33406f9c259f06.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ad348e7512718f254f3e6e015e65794cf1307d870ad3d8294d33406f9c259f06.exe
Resource
win10v2004-20221111-en
General
-
Target
ad348e7512718f254f3e6e015e65794cf1307d870ad3d8294d33406f9c259f06
-
Size
6KB
-
MD5
ab01a07c809fbfc1db74d69a26e5edde
-
SHA1
1497b1670af420e13012234afcced89835fe6f69
-
SHA256
ad348e7512718f254f3e6e015e65794cf1307d870ad3d8294d33406f9c259f06
-
SHA512
75533678c1181d7ae78337d5d890d0f60393ff6edf13cb9690f39664270568bbac61b6e7ea6b574c6dfa219dba66e395c3d90bbd33d94a3396cb9be3111b49ee
-
SSDEEP
48:a29TuGWIcRfOhBr2b1QeWF8H8Qt/qLWYvPHs2GbhOj:dTcRfOjNNF8H8hF/J6h
Malware Config
Signatures
Files
-
ad348e7512718f254f3e6e015e65794cf1307d870ad3d8294d33406f9c259f06.exe windows x64
00388096772862f5593fc0c539317e8e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
ntoskrnl.exe
KeBugCheckEx
fltmgr.sys
FltStartFiltering
FltSetCallbackDataDirty
FltReissueSynchronousIo
FltUnregisterFilter
FltRegisterFilter
Sections
.text Size: 512B - Virtual size: 332B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 356B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 280B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 48B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
PAGE Size: 512B - Virtual size: 43B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
INIT Size: 512B - Virtual size: 460B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 84B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ