Static task
static1
Behavioral task
behavioral1
Sample
80c96c0e2f498b50e729844f5245e046883a21ce08f6ba133fdace402326704b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
80c96c0e2f498b50e729844f5245e046883a21ce08f6ba133fdace402326704b.exe
Resource
win10v2004-20221111-en
General
-
Target
80c96c0e2f498b50e729844f5245e046883a21ce08f6ba133fdace402326704b
-
Size
27KB
-
MD5
8b28d3452cb937e0d28d37bee7b04989
-
SHA1
5acee7df36fff7adb4e9068da036695ee8806b80
-
SHA256
80c96c0e2f498b50e729844f5245e046883a21ce08f6ba133fdace402326704b
-
SHA512
32574fc60a24d80ed04538800ac70ab2c8cf58955ea627062bd8f088640e782e9379b090763f48c89dc6efc622039e695af139231d42cd086ac58b2f8dd9d82d
-
SSDEEP
384:trR/Yhq4ErkuAA3yTfUQ1FPYywa7IfDSaVUJqLZ5M/kd4g3pSRhY4MnGrfk:tNYkvbAtzxPYpauWaBbMAJ5SRhsn8
Malware Config
Signatures
Files
-
80c96c0e2f498b50e729844f5245e046883a21ce08f6ba133fdace402326704b.exe windows x86
701856af30c0138adf0a7dd2792b3704
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
IoWMIQueryAllDataMultiple
PsCreateSystemThread
IoGetDeviceInterfaceAlias
ExAllocatePool
memset
_allshl
Sections
.text Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 128B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 256B - Virtual size: 196B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 128B - Virtual size: 44B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ