Static task
static1
Behavioral task
behavioral1
Sample
afe3897c01e0ebe279713607e73cbd9d8916eafdd33727c34288ee5aff544b4d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
afe3897c01e0ebe279713607e73cbd9d8916eafdd33727c34288ee5aff544b4d.exe
Resource
win10v2004-20220812-en
General
-
Target
afe3897c01e0ebe279713607e73cbd9d8916eafdd33727c34288ee5aff544b4d
-
Size
43KB
-
MD5
194186339adaeb18c49804c636528603
-
SHA1
0a6cafbf863a0232065702f8fb8f64ed734920d4
-
SHA256
afe3897c01e0ebe279713607e73cbd9d8916eafdd33727c34288ee5aff544b4d
-
SHA512
0b618720b4445679af3d9de853ef61327f0d4e31391af777a08f7121a738bd5a268a7eff6b6e14c452ef3926294faf714f2b4bd501e64a10f82fe7b428a64d42
-
SSDEEP
384:jizGElSFKJksK9hZ7XgNNvN6cXLJFt8BgzokZdWd:+zGBFKJkslfngBgzoEw
Malware Config
Signatures
Files
-
afe3897c01e0ebe279713607e73cbd9d8916eafdd33727c34288ee5aff544b4d.exe windows x86
e59f3be517c36671167eecdc40d19e5a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
hal
KdComPortInUse
IoFreeAdapterChannel
HalAdjustResourceList
ntoskrnl.exe
FsRtlNotifyInitializeSync
KiDispatchInterrupt
_wcsicmp
Sections
.text Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
INIT Size: 128B - Virtual size: 128B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 32B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 288B - Virtual size: 288B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ