Static task
static1
Behavioral task
behavioral1
Sample
8f2779eb5e27a17ebc436c122b4701fe96de94f30736d381d4db5df10bb4d0e5.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8f2779eb5e27a17ebc436c122b4701fe96de94f30736d381d4db5df10bb4d0e5.exe
Resource
win10v2004-20221111-en
General
-
Target
8f2779eb5e27a17ebc436c122b4701fe96de94f30736d381d4db5df10bb4d0e5
-
Size
45KB
-
MD5
120fb5e636feaf6b66c920c432ae8c40
-
SHA1
670b8b72102af56137d361c43349e80748275767
-
SHA256
8f2779eb5e27a17ebc436c122b4701fe96de94f30736d381d4db5df10bb4d0e5
-
SHA512
aaf0280453cb44a7bf31ed8e9c0e9c97011d686a1b0fa13d11a217e020f0a5fd718349627db73a6841a3c2df8d9937c95442e0d93f4794e40361e2de09075bcf
-
SSDEEP
768:fGzewfCPxU9DifHku8wS0tGQ11Frz8b5M4n:N2ZifHkA1R1F3253
Malware Config
Signatures
Files
-
8f2779eb5e27a17ebc436c122b4701fe96de94f30736d381d4db5df10bb4d0e5.exe windows x86
1b4cd1b1c2c5660f4b6606a6b5d511c5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
ExAllocatePoolWithTag
RtlCharToInteger
RtlInitUnicodeString
ExFreePoolWithTag
RtlAppendUnicodeStringToString
memset
RtlGetVersion
KeTickCount
KeBugCheckEx
Sections
.text Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 384B - Virtual size: 352B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ