Static task
static1
Behavioral task
behavioral1
Sample
ccf22dc54ada58ab55d50e5e05062f3f8d648550711e5c2f84b9c6579616a8c7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ccf22dc54ada58ab55d50e5e05062f3f8d648550711e5c2f84b9c6579616a8c7.exe
Resource
win10v2004-20220812-en
General
-
Target
ccf22dc54ada58ab55d50e5e05062f3f8d648550711e5c2f84b9c6579616a8c7
-
Size
60KB
-
MD5
6de3e9c339d843a872f8361c643ca763
-
SHA1
aec978c2635c0c48721f0f58969219815681af27
-
SHA256
ccf22dc54ada58ab55d50e5e05062f3f8d648550711e5c2f84b9c6579616a8c7
-
SHA512
047c77349ef4cbd8355f7fabaee73839bcd4574a897c2576f5153741c30e7bf1f75b51f8f26f354826643b2dbd0d3db75aeeee36da6913f886fbab1020e527cb
-
SSDEEP
1536:CH5U5f0GYr1C1/nDdYFWYbxyOmyNHXJLKxfyE3dZEPul8W3H/hB26VK2:Q50lh9nRAxyaFXJL+fyENZd8Wp6
Malware Config
Signatures
Files
-
ccf22dc54ada58ab55d50e5e05062f3f8d648550711e5c2f84b9c6579616a8c7.exe windows x86
b9bb6a1daf608dfd81f9a35eb8afd85b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
MmIsNonPagedSystemAddressValid
MmQuerySystemSize
ZwOpenFile
KeQuerySystemTime
ExAllocatePoolWithTag
ZwSetInformationFile
IoSetDeviceInterfaceState
ZwCreateDirectoryObject
ExIsProcessorFeaturePresent
ZwClose
RtlInitUnicodeString
ExFreePoolWithTag
KeGetRecommendedSharedDataAlignment
RtlAppendUnicodeToString
ExGetPreviousMode
KeTickCount
Sections
.text Size: 55KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 256B - Virtual size: 201B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 384B - Virtual size: 276B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 640B - Virtual size: 576B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ