Static task
static1
Behavioral task
behavioral1
Sample
6aa30550fc49491068b612393f60036cf5728cc2368f6e4915d1140439074bbd.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
6aa30550fc49491068b612393f60036cf5728cc2368f6e4915d1140439074bbd.exe
Resource
win10v2004-20221111-en
General
-
Target
6aa30550fc49491068b612393f60036cf5728cc2368f6e4915d1140439074bbd
-
Size
3KB
-
MD5
452895d94aca86fb6488d811defbf24e
-
SHA1
8ef62913f8eb05836cd0825b70562eb97c9745be
-
SHA256
6aa30550fc49491068b612393f60036cf5728cc2368f6e4915d1140439074bbd
-
SHA512
ef21b149b45737f5020a90cf8e4b385790a12fb29076f857687d436f4e5fe8939f42c9ab9c8b1d5b83759e09abf50c2281e7620012a072b6c189450aff3a5dbc
Malware Config
Signatures
Files
-
6aa30550fc49491068b612393f60036cf5728cc2368f6e4915d1140439074bbd.exe windows x86
8643ed764f9b0a68f8edf10c6a44e7ec
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
KeServiceDescriptorTable
IofCompleteRequest
IoDeleteSymbolicLink
IoDeleteDevice
IoCreateSymbolicLink
IoCreateDevice
RtlInitUnicodeString
swprintf
Sections
.text Size: 768B - Virtual size: 766B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 128B - Virtual size: 36B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 128B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 384B - Virtual size: 260B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 128B - Virtual size: 78B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ