Static task
static1
Behavioral task
behavioral1
Sample
b29a790c6cbb013c676f4e91803088c4b089d3e321346ff63c6d87c5a1883bd4.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b29a790c6cbb013c676f4e91803088c4b089d3e321346ff63c6d87c5a1883bd4.exe
Resource
win10v2004-20221111-en
General
-
Target
b29a790c6cbb013c676f4e91803088c4b089d3e321346ff63c6d87c5a1883bd4
-
Size
4KB
-
MD5
42907478477c90266c3518ef59ff6a6b
-
SHA1
650af6f73b655206f49f375a72ddf42839ed9909
-
SHA256
b29a790c6cbb013c676f4e91803088c4b089d3e321346ff63c6d87c5a1883bd4
-
SHA512
2087cf5e9a1457bf7fd08962392b0f2e1a4226d3f189c7ff1c8899db1be932151567b503ccb2676117a58f17b8b6855f69293944d882dc35d6b4fc3183bd16a7
-
SSDEEP
48:6GbEJoRJr29MZbLzN0SxAuZ83tzcTJdn+90Z71P500a9F7UtEWd:3QJOVxzLitgVCOPS8/d
Malware Config
Signatures
Files
-
b29a790c6cbb013c676f4e91803088c4b089d3e321346ff63c6d87c5a1883bd4.exe windows x86
9195552aaab9c0cf05ebc7215fb54da9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
IoGetCurrentProcess
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 128B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 96B - Virtual size: 74B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
INIT Size: 96B - Virtual size: 84B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 96B - Virtual size: 76B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ