Static task
static1
Behavioral task
behavioral1
Sample
cd78383ccf041e564de002d967562794ffafe8d4a778f6e28c1d650c8cbfbfbf.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cd78383ccf041e564de002d967562794ffafe8d4a778f6e28c1d650c8cbfbfbf.exe
Resource
win10v2004-20220812-en
General
-
Target
cd78383ccf041e564de002d967562794ffafe8d4a778f6e28c1d650c8cbfbfbf
-
Size
4KB
-
MD5
f245ee17ed0230140bab972adf0aae6a
-
SHA1
0d0e25094083cff8c9c0c47900b00d0ecdd2e4e1
-
SHA256
cd78383ccf041e564de002d967562794ffafe8d4a778f6e28c1d650c8cbfbfbf
-
SHA512
ee72821cb556589e074ab1d2505c8cdcd190957fee93d9b574e4e3d09c968b714d07456be530eca60f10d4b21bc4cd675dce565d10e5864255d27f7fe11f339e
Malware Config
Signatures
Files
-
cd78383ccf041e564de002d967562794ffafe8d4a778f6e28c1d650c8cbfbfbf.exe windows x86
827ca326a7b8dd460d7d11810f71dbcd
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
ExFreePoolWithTag
ExAllocatePoolWithTag
ZwQuerySystemInformation
RtlFreeUnicodeString
ZwClose
ZwReadFile
ZwSetInformationFile
ZwOpenFile
RtlAnsiStringToUnicodeString
RtlInitAnsiString
KeServiceDescriptorTable
KeTickCount
KeBugCheckEx
Sections
.text Size: 1024B - Virtual size: 938B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 155B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 512B - Virtual size: 454B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 116B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ