Static task
static1
Behavioral task
behavioral1
Sample
e641cb3b1e61b3aa09ef5212cd391e85cabc8e41279eab40db82209db6a66eca.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e641cb3b1e61b3aa09ef5212cd391e85cabc8e41279eab40db82209db6a66eca.exe
Resource
win10v2004-20221111-en
General
-
Target
e641cb3b1e61b3aa09ef5212cd391e85cabc8e41279eab40db82209db6a66eca
-
Size
8KB
-
MD5
830bfa061a7382ffc4f1b4d0fa5b3b5d
-
SHA1
27f3171f3168abdd4707a577729ac218abcc7beb
-
SHA256
e641cb3b1e61b3aa09ef5212cd391e85cabc8e41279eab40db82209db6a66eca
-
SHA512
b0ef648a3f203aabfc27b9c1022513e4b08808c23bbc993920977932cb497feaf212133143cce2f31c7b42ac18b7eab138d70a106ff40f224620a57d64de91fe
-
SSDEEP
96:FlanMvcnh7OGBEbmlX0S4y9lhnXstfFZ5:randWbmG2lhXy
Malware Config
Signatures
Files
-
e641cb3b1e61b3aa09ef5212cd391e85cabc8e41279eab40db82209db6a66eca.exe windows x86
d9c9c4541168665f44917e3ddc4a00d5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
DbgPrint
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 128B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 96B - Virtual size: 68B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
INIT Size: 96B - Virtual size: 74B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 128B - Virtual size: 112B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ