Static task
static1
Behavioral task
behavioral1
Sample
b9a59c40463296da8e25cbc6e37a0b205f8756870a524fce14e50e501ade976d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b9a59c40463296da8e25cbc6e37a0b205f8756870a524fce14e50e501ade976d.exe
Resource
win10v2004-20221111-en
General
-
Target
b9a59c40463296da8e25cbc6e37a0b205f8756870a524fce14e50e501ade976d
-
Size
7KB
-
MD5
61eede77d74ec657a2f09eef3a05f81b
-
SHA1
6f99b8bb604f6c29d9e34f456cb76a5c17efd3b1
-
SHA256
b9a59c40463296da8e25cbc6e37a0b205f8756870a524fce14e50e501ade976d
-
SHA512
0c950787ecde9621c8d00a91b016c3494b6b2a45c3d5ef85011d3e9067667c84421d95c1b21dbf3ff9179beb11d82a58826d2dad9530cd4e0c04eebb71e2a234
-
SSDEEP
96:xNfD7l0M0h2tUk38RMRCa0qCJ6/CMsW5kVRtWg/jsOnnSc:xNLCM/L8eRh02Zh5pCsOn
Malware Config
Signatures
Files
-
b9a59c40463296da8e25cbc6e37a0b205f8756870a524fce14e50e501ade976d.exe windows x86
2fd1940add3ad4bfdf9c85ebe63d530f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
DbgPrint
IoFreeMdl
MmUnmapLockedPages
ZwQuerySystemInformation
MmMapLockedPages
MmBuildMdlForNonPagedPool
MmCreateMdl
KeServiceDescriptorTable
KeTickCount
Sections
.text Size: 512B - Virtual size: 406B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 171B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 40B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 512B - Virtual size: 348B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 136B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ