Static task
static1
Behavioral task
behavioral1
Sample
8ac92c472a2bf4e4993ccb63c2b8eea20dc9db692a50da55f0ff39125d16e6fb.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8ac92c472a2bf4e4993ccb63c2b8eea20dc9db692a50da55f0ff39125d16e6fb.exe
Resource
win10v2004-20221111-en
General
-
Target
8ac92c472a2bf4e4993ccb63c2b8eea20dc9db692a50da55f0ff39125d16e6fb
-
Size
21KB
-
MD5
ef0aee84ba9393bea74d8298a0376817
-
SHA1
6ae208f3a40eba21fb67a0a62797c82648516c17
-
SHA256
8ac92c472a2bf4e4993ccb63c2b8eea20dc9db692a50da55f0ff39125d16e6fb
-
SHA512
394e15f4b104b35c5ec5534851c65cc589463c432e2b2f756c9151a1e35f734959fe6dbc6dc4d3f7b1243bccae14cbd1e816e3c14a05734e1cc2bd13871b4467
-
SSDEEP
384:e8FIs8Th5sZepDh9uuqcIf5olIpYLZZJdYEXK4qhmKxkyRQTcJI:Ovh2UpVn859kdYELgmKx/Ra
Malware Config
Signatures
Files
-
8ac92c472a2bf4e4993ccb63c2b8eea20dc9db692a50da55f0ff39125d16e6fb.exe windows x86
07de8a151bed0b8a4afd48f7b2691d1f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
DbgPrint
FsRtlAreNamesEqual
ObQueryNameString
ZwSaveKey
MmIsNonPagedSystemAddressValid
ZwQueryDefaultLocale
ZwQueryInformationProcess
ExAllocatePool
RtlCustomCPToUnicodeN
CcUnpinData
RtlFindMessage
ExFreePool
RtlIntegerToUnicodeString
towupper
InterlockedIncrement
RtlGetSaclSecurityDescriptor
IoBuildAsynchronousFsdRequest
WRITE_REGISTER_ULONG
RtlFillMemoryUlong
ZwQueryInformationFile
PsChargePoolQuota
ZwDeleteKey
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ILIT Size: 1024B - Virtual size: 614B
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 391B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 26B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ