Static task
static1
Behavioral task
behavioral1
Sample
c243a9e81d68a9006e19f6ac92e4f5245969820e70fe816f8212f63087dc0829.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c243a9e81d68a9006e19f6ac92e4f5245969820e70fe816f8212f63087dc0829.exe
Resource
win10v2004-20220901-en
General
-
Target
c243a9e81d68a9006e19f6ac92e4f5245969820e70fe816f8212f63087dc0829
-
Size
62KB
-
MD5
f0f66dbbd3640837a2c723afd426f673
-
SHA1
8886a28681562ab0066c386e5f3a2bbe3ad03754
-
SHA256
c243a9e81d68a9006e19f6ac92e4f5245969820e70fe816f8212f63087dc0829
-
SHA512
432bc307f973e9239e571b9dbc0832396f79bdcc12fc1ae50246b3b377620cc9a2c6fb31ba8aee4a1f9f6ac94ef4fb5f5c7a4142c4f2288295381f104325adb8
-
SSDEEP
1536:oxTO9EhZq0Sd6en0DE+aV3J1jbHtm4leE:oxTOQq0Sz0Y+a1J1ntt
Malware Config
Signatures
Files
-
c243a9e81d68a9006e19f6ac92e4f5245969820e70fe816f8212f63087dc0829.exe windows x86
810c99ad216ab7f7283d3b84c7605016
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
hal
KeQueryPerformanceCounter
ntoskrnl.exe
IoGetCurrentProcess
MmQuerySystemSize
KeInitializeMutex
PsGetCurrentThreadId
KeInitializeEvent
KeGetCurrentThread
KeTickCount
PsGetVersion
KeQueryActiveProcessors
KeInitializeTimer
PsGetCurrentProcessId
KeInitializeSpinLock
Sections
.text Size: 59KB - Virtual size: 58KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 384B - Virtual size: 289B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 128B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 512B - Virtual size: 422B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 896B - Virtual size: 808B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ