Static task
static1
Behavioral task
behavioral1
Sample
98116b71d6d15780f41bd1db5faaf67c7c88e3ab1ef6781bab9ec261609af4d9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
98116b71d6d15780f41bd1db5faaf67c7c88e3ab1ef6781bab9ec261609af4d9.exe
Resource
win10v2004-20220812-en
General
-
Target
98116b71d6d15780f41bd1db5faaf67c7c88e3ab1ef6781bab9ec261609af4d9
-
Size
5KB
-
MD5
46dea9b1783aa1c9f4a5eff48756c7d8
-
SHA1
61f52e814439a2f44494562d601124bb576173e5
-
SHA256
98116b71d6d15780f41bd1db5faaf67c7c88e3ab1ef6781bab9ec261609af4d9
-
SHA512
21fbd770abd378b50c92b3d94dda26388c533d3c466d1fbf97c50eb207d6eab32cbe09b922a64630a7c86f34222c3fb25466adcc006c71c65e7ab792b6164bb2
-
SSDEEP
48:qBPe+YFgFQYRcnmB774X9+yF9UxFHQSP0jRr5MVT+gHmfAdiBlB7:wGV6mnmy9+yFo0j1CiBH
Malware Config
Signatures
Files
-
98116b71d6d15780f41bd1db5faaf67c7c88e3ab1ef6781bab9ec261609af4d9.exe windows x86
d3242821207c4e4f987c965f38b29779
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
PsGetVersion
MmGetSystemRoutineAddress
RtlInitUnicodeString
IoDeleteDevice
IoCreateSymbolicLink
IoCreateDevice
IoDeleteSymbolicLink
KeServiceDescriptorTable
Sections
.text Size: 512B - Virtual size: 386B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 36B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 84B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PAGE Size: 512B - Virtual size: 306B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
INIT Size: 512B - Virtual size: 506B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 864B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 132B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ