Static task
static1
Behavioral task
behavioral1
Sample
77e9e29891be040ca9783bc34e989b927306521136974d0c794a9d54568b2055.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
77e9e29891be040ca9783bc34e989b927306521136974d0c794a9d54568b2055.exe
Resource
win10v2004-20220812-en
General
-
Target
77e9e29891be040ca9783bc34e989b927306521136974d0c794a9d54568b2055
-
Size
22KB
-
MD5
dbdfb9d19bb98e1eb851447cf63e2ad0
-
SHA1
f4dbb85b42cfe0543c044b77554b68f12a4f0cca
-
SHA256
77e9e29891be040ca9783bc34e989b927306521136974d0c794a9d54568b2055
-
SHA512
d32af89769e62b5919f599aa5241e65d0d675780b8d7bcd4c881d3d1d4f6dd55f433180e307524b12107f7541a91c69554e254ef502ce2a4922137a51391dc71
-
SSDEEP
384:AnC9o5C6sqFWmJQmhQ1V03Ue/CyugTsJQEqS3qSCg6NpIAwpMQElp+:Ayo5CUFpJQmOa3Ue/jBYJQz7g6Nphgwv
Malware Config
Signatures
Files
-
77e9e29891be040ca9783bc34e989b927306521136974d0c794a9d54568b2055.exe windows x86
6bb11f1599a1ffbabaf4622053c97890
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
ExAllocatePoolWithTag
RtlInitUnicodeString
ExFreePoolWithTag
MmGetSystemRoutineAddress
ExRaiseStatus
_except_handler3
Sections
.text Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
INIT Size: 256B - Virtual size: 214B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 256B - Virtual size: 204B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ