Static task
static1
Behavioral task
behavioral1
Sample
ca114cc33043ca76db261fc0b434e790b5a379dde6e0bfa3a5088a360f3a529e.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ca114cc33043ca76db261fc0b434e790b5a379dde6e0bfa3a5088a360f3a529e.exe
Resource
win10v2004-20220901-en
General
-
Target
ca114cc33043ca76db261fc0b434e790b5a379dde6e0bfa3a5088a360f3a529e
-
Size
6KB
-
MD5
fdb1e68dadd63107da738d4ecf873db9
-
SHA1
041bc0f0afaa5c94d75ecd804bc8c435f1f3453b
-
SHA256
ca114cc33043ca76db261fc0b434e790b5a379dde6e0bfa3a5088a360f3a529e
-
SHA512
da4e0ae810523f8e87a712867592edc01e992fa97017d73a34aabee91f2d5c11e573f63766caaac66f746ac0f86964af4c5bb0d645f28f574ea8eb28a3eb55c4
-
SSDEEP
96:cI42FlgcA4sHndetl/cruQ1Fa/TdQqfaMbqQXwCGL9lBREc8fl2j:Pfngc5ueEC35zqQXw1hqc8fU
Malware Config
Signatures
Files
-
ca114cc33043ca76db261fc0b434e790b5a379dde6e0bfa3a5088a360f3a529e.exe windows x86
790a705bb6e01a5ec06e60aeca34cb54
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
DbgPrint
ExFreePoolWithTag
KeUnstackDetachProcess
ProbeForRead
KeStackAttachProcess
ExAllocatePoolWithTag
PsLookupProcessByProcessId
_except_handler3
ProbeForWrite
MmIsAddressValid
IoDeleteDevice
IoDeleteSymbolicLink
IofCompleteRequest
IoCreateSymbolicLink
IoCreateDevice
RtlInitUnicodeString
KeTickCount
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 384B - Virtual size: 292B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 128B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 640B - Virtual size: 554B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 256B - Virtual size: 160B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ