Static task
static1
Behavioral task
behavioral1
Sample
b417b140533aa433c190e1de923a61e6eab35db467d253a4760f2e84dec81a93.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b417b140533aa433c190e1de923a61e6eab35db467d253a4760f2e84dec81a93.exe
Resource
win10v2004-20220812-en
General
-
Target
b417b140533aa433c190e1de923a61e6eab35db467d253a4760f2e84dec81a93
-
Size
3KB
-
MD5
c96e5ba2c34b31b4ddeb3373d107636e
-
SHA1
082e45a8d67b5180f9b6b7d7cb42603a99d61d52
-
SHA256
b417b140533aa433c190e1de923a61e6eab35db467d253a4760f2e84dec81a93
-
SHA512
90d05bbe697a87c233f3a34091f1322befa83d8778e3fdfd3c106d03fe9769d02b5b4a5d4214b278307e2b26405f65e6b12dcb7504771020b1343d9b26e1596a
Malware Config
Signatures
Files
-
b417b140533aa433c190e1de923a61e6eab35db467d253a4760f2e84dec81a93.exe windows x86
839504a3b3e7f0c6f906b22a2933a8e3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
IofCompleteRequest
ZwDeleteFile
KeTickCount
RtlInitUnicodeString
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 128B - Virtual size: 127B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 128B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 256B - Virtual size: 218B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 128B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ