Static task
static1
Behavioral task
behavioral1
Sample
9e0c47d9f4ad0adbe4d2d637eac2276459805a3b19a78e04b6d1ac5f01a1d0ec.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9e0c47d9f4ad0adbe4d2d637eac2276459805a3b19a78e04b6d1ac5f01a1d0ec.exe
Resource
win10v2004-20221111-en
General
-
Target
9e0c47d9f4ad0adbe4d2d637eac2276459805a3b19a78e04b6d1ac5f01a1d0ec
-
Size
7KB
-
MD5
af1c38e056a46260efbb35d97076845e
-
SHA1
d82716d00e4747d185a67f97a4a634c033ee51dc
-
SHA256
9e0c47d9f4ad0adbe4d2d637eac2276459805a3b19a78e04b6d1ac5f01a1d0ec
-
SHA512
6c7725062c4d55e85855059c0cc5e6678484cf32131203a831714c50c4ccb10b9d77831e6da01a8c9feaa45acde2c435bd2cd322261378e04d04c4c6f763097a
-
SSDEEP
96:S9Rl4xolfTYLaKu6T83wqJzu6fF/EZl+0UYNqu02C/Ae2GNVHk:TKkLaKu6T8A0fFcZl+0Ue0PVHk
Malware Config
Signatures
Files
-
9e0c47d9f4ad0adbe4d2d637eac2276459805a3b19a78e04b6d1ac5f01a1d0ec.exe windows x86
b121b8a33aadecda4d7f4ecdd3891111
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
IofCompleteRequest
KeWaitForSingleObject
KeResetEvent
KeInitializeEvent
NtBuildNumber
ZwEnumerateValueKey
ZwEnumerateKey
ZwOpenKey
ZwQueryDirectoryFile
ZwDeviceIoControlFile
ZwQuerySystemInformation
KeServiceDescriptorTable
strncmp
IoGetCurrentProcess
strncpy
RtlCopyUnicodeString
ExFreePool
ExAllocatePoolWithTag
RtlFreeUnicodeString
RtlUpcaseUnicodeString
RtlAnsiStringToUnicodeString
RtlInitAnsiString
RtlInitUnicodeString
memmove
RtlCompareUnicodeString
KeTickCount
KeBugCheckEx
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 256B - Virtual size: 199B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 384B - Virtual size: 320B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 896B - Virtual size: 772B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 390B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ