Static task
static1
Behavioral task
behavioral1
Sample
d83deaea5096f99ffacbab6f369dcc0413a7e1ecc6d00f93575f8c6c969010c0.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d83deaea5096f99ffacbab6f369dcc0413a7e1ecc6d00f93575f8c6c969010c0.exe
Resource
win10v2004-20220812-en
General
-
Target
d83deaea5096f99ffacbab6f369dcc0413a7e1ecc6d00f93575f8c6c969010c0
-
Size
38KB
-
MD5
73c506b73a9dcd06767c87211fccc0ec
-
SHA1
3056b4a208b9dc955e8d630e45d60ab594a91d2f
-
SHA256
d83deaea5096f99ffacbab6f369dcc0413a7e1ecc6d00f93575f8c6c969010c0
-
SHA512
9cc40c37f3cf7968c7cff252bdf1a637cbd4417177999af63f97e2a5fc8ea78924e4666a1c030cf5d93ab785f008d6ba65edf87941e9dc4293b85bdf872bb836
-
SSDEEP
768:ivBVlb7+NI/oCN3gaY4Xgi7Gm03+46fbp58g9Yg6466ocOGgIgS:IFu+4Cb8gGg6h6oQgIg
Malware Config
Signatures
Files
-
d83deaea5096f99ffacbab6f369dcc0413a7e1ecc6d00f93575f8c6c969010c0.exe windows x86
ac694e00a2633d6bf820fd81450354a7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
PsCreateSystemThread
RtlInitUnicodeString
memcpy
RtlCompareUnicodeString
RtlFreeAnsiString
atoi
RtlFreeUnicodeString
RtlUnicodeStringToAnsiString
RtlQueryRegistryValues
memset
ExAllocatePoolWithTag
ExFreePool
Sections
.text Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 256B - Virtual size: 200B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 128B - Virtual size: 92B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 384B - Virtual size: 348B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 384B - Virtual size: 304B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ