Static task
static1
Behavioral task
behavioral1
Sample
a7924fc188a9cf3abcd5d4da5d3d6dad5c1ad10e6e6e8e613da75522533efb7b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a7924fc188a9cf3abcd5d4da5d3d6dad5c1ad10e6e6e8e613da75522533efb7b.exe
Resource
win10v2004-20221111-en
General
-
Target
a7924fc188a9cf3abcd5d4da5d3d6dad5c1ad10e6e6e8e613da75522533efb7b
-
Size
8KB
-
MD5
982652e12b6c84ffe4bd61d39b7b50ed
-
SHA1
8e820383dae91989c201b912e63c8bcfe394d3d6
-
SHA256
a7924fc188a9cf3abcd5d4da5d3d6dad5c1ad10e6e6e8e613da75522533efb7b
-
SHA512
40e7969fce1351bed214c29eb755d279ff3a9f0a7e0bbda0bb60810cc4c890608486491e993346ab2a89bae1381aec01583fb63c4acf1268d615c90c2fa2627a
-
SSDEEP
192:Plgl/JfEpsGSSFSSXhEM2Tfq4oVTz9FwpNlBeP+WoUE:mJfEpDE7TfoFe9W+WoH
Malware Config
Signatures
Files
-
a7924fc188a9cf3abcd5d4da5d3d6dad5c1ad10e6e6e8e613da75522533efb7b.exe windows x86
95baa87b6ba18646393ed6d4dafe5bb8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ndis.sys
NdisGetCurrentSystemTime
NdisRegisterProtocol
ntoskrnl.exe
IofCompleteRequest
KeServiceDescriptorTable
MmIsAddressValid
IoGetCurrentProcess
ObDereferenceObject
IoGetDeviceObjectPointer
IoCreateFile
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 192B - Virtual size: 180B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 528B - Virtual size: 522B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 720B - Virtual size: 720B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ