Static task
static1
Behavioral task
behavioral1
Sample
b8da3a6e908ac95217a46376b0e5576eb4b210c0b6c0c3f46997af321aaaaea8.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b8da3a6e908ac95217a46376b0e5576eb4b210c0b6c0c3f46997af321aaaaea8.exe
Resource
win10v2004-20220901-en
General
-
Target
b8da3a6e908ac95217a46376b0e5576eb4b210c0b6c0c3f46997af321aaaaea8
-
Size
129KB
-
MD5
eae72db86bc2434513d3d36e1417b069
-
SHA1
94d98fc113f6feef6cde4c70bb41fee94cdabdd3
-
SHA256
b8da3a6e908ac95217a46376b0e5576eb4b210c0b6c0c3f46997af321aaaaea8
-
SHA512
0d4efebadb37bf8783dd2d4498e2be407abb54de2a15d9ff8cfba682800fb79d2cc92fb8a78d83a5db5104b6a530dcab5bd435607d4e15c71d2da541ab2d0da7
-
SSDEEP
3072:iyp6H7dTEZFMZ47pYF1WTi+9dmQh71DvewbFE57rIFHCe:Bp6H7d4ZFbYDWTLmA71DveUE57A
Malware Config
Signatures
Files
-
b8da3a6e908ac95217a46376b0e5576eb4b210c0b6c0c3f46997af321aaaaea8.exe windows x86
e7bf8e8284d23a4979702864d48aa5f3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
scsiport.sys
ScsiPortGetDeviceBase
ScsiPortGetBusData
ScsiPortFreeDeviceBase
ScsiPortGetPhysicalAddress
ScsiPortReadPortUchar
ScsiPortReadPortUshort
ScsiPortReadPortUlong
ScsiPortReadPortBufferUchar
ScsiPortReadPortBufferUshort
ScsiPortReadPortBufferUlong
ScsiPortWritePortUchar
ScsiPortWritePortUshort
ScsiPortWritePortUlong
ScsiPortWritePortBufferUchar
ScsiPortWritePortBufferUshort
ScsiPortWritePortBufferUlong
ScsiPortReadRegisterUchar
ScsiPortReadRegisterUshort
ScsiPortReadRegisterUlong
ScsiPortReadRegisterBufferUchar
ScsiPortReadRegisterBufferUshort
ScsiPortReadRegisterBufferUlong
ScsiPortWriteRegisterUchar
ScsiPortWriteRegisterUshort
ScsiPortWriteRegisterUlong
ScsiPortWriteRegisterBufferUchar
ScsiPortWriteRegisterBufferUshort
ScsiPortWriteRegisterBufferUlong
ScsiPortNotification
ScsiPortSetBusDataByOffset
ScsiPortStallExecution
ScsiPortLogError
ScsiPortGetLogicalUnit
ScsiPortCompleteRequest
ScsiPortGetUncachedExtension
ScsiPortInitialize
Sections
.text Size: 111KB - Virtual size: 111KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 529B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ