Static task
static1
Behavioral task
behavioral1
Sample
eb0bfea4c1d87332bd514d5043b70920a5d157dd5ed8defd7b9fcea77bf16f6f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
eb0bfea4c1d87332bd514d5043b70920a5d157dd5ed8defd7b9fcea77bf16f6f.exe
Resource
win10v2004-20220812-en
General
-
Target
eb0bfea4c1d87332bd514d5043b70920a5d157dd5ed8defd7b9fcea77bf16f6f
-
Size
59KB
-
MD5
8c7dc490cfdd6c28dc324f5b7baa6755
-
SHA1
e6f7b3dd136206e62654ed6a7e759649636f431f
-
SHA256
eb0bfea4c1d87332bd514d5043b70920a5d157dd5ed8defd7b9fcea77bf16f6f
-
SHA512
038adde665fb43453b9250134212d62d1abd221265a6369f3b9265f8a5a78b1374da14b9b13f584173e2b02331b57636fd35e9e03ec10aae8d3265e003e7c6b0
-
SSDEEP
1536:S+DpeGO19dyYgD5Bg4Zcj32VVUeY0yAKkl:BoG0ryYgDTtcSnfFKk
Malware Config
Signatures
Files
-
eb0bfea4c1d87332bd514d5043b70920a5d157dd5ed8defd7b9fcea77bf16f6f.exe windows x86
e3ecf45ee9701cc68113ce05a8344eff
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
hal
KeQueryPerformanceCounter
ntoskrnl.exe
IoGetCurrentProcess
PsGetCurrentThreadId
KeInitializeTimer
KeInitializeSpinLock
KeInitializeMutex
KeInitializeEvent
MmQuerySystemSize
KeTickCount
PsGetVersion
KeGetCurrentThread
KeQueryActiveProcessors
PsGetCurrentProcessId
Sections
.text Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 384B - Virtual size: 268B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 128B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 512B - Virtual size: 422B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 768B - Virtual size: 752B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ