Static task
static1
Behavioral task
behavioral1
Sample
92ed8518039376ebc52e2239fa68d532768fe80752b331adf7fe84cfc9137c59.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
92ed8518039376ebc52e2239fa68d532768fe80752b331adf7fe84cfc9137c59.exe
Resource
win10v2004-20221111-en
General
-
Target
92ed8518039376ebc52e2239fa68d532768fe80752b331adf7fe84cfc9137c59
-
Size
22KB
-
MD5
621c35f89b82d243ce774ac1ff8a8eeb
-
SHA1
020481a8d5988916132471637eda7cb6900bc868
-
SHA256
92ed8518039376ebc52e2239fa68d532768fe80752b331adf7fe84cfc9137c59
-
SHA512
a334dd3c7a8c88d38f206424a49055bbe07cf27205881b2e300d6a46d220fa604ad8370414fdeda48eb117748036907955374cb296402e365b023c412f003d1c
-
SSDEEP
384:MBsPtBe8PtLISScid63wL+nGw6NChgsT7t/Z7yt+pVzmdfa5IxdMGzJj7eNHZ:RBlFIBT+Q0hgsT7lZ7lVz4i6LHj7eN5
Malware Config
Signatures
Files
-
92ed8518039376ebc52e2239fa68d532768fe80752b331adf7fe84cfc9137c59.exe windows x86
1f1435b1ef5e2b1488e6ce8c691c8b09
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
_wcsicmp
ExInterlockedAddLargeInteger
FsRtlUninitializeLargeMcb
CcSetLogHandleForFile
ZwQueryInformationProcess
RtlDeleteRange
ExInterlockedInsertTailList
RtlLookupElementGenericTableFull
ExFreePool
ExAllocatePool
IoAttachDeviceToDeviceStack
mbtowc
wcsncmp
PsGetVersion
memset
KeIsExecutingDpc
CcPrepareMdlWrite
KefReleaseSpinLockFromDpcLevel
ZwDeleteValueKey
KeAcquireSpinLockAtDpcLevel
ZwQueryInformationFile
MmUnmapViewOfSection
FsRtlCopyWrite
KeReleaseMutex
ExInitializePagedLookasideList
ZwDeleteKey
NtSetQuotaInformationFile
ZwQueryDefaultLocale
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ILIT Size: 1024B - Virtual size: 614B
IMAGE_SCN_MEM_READ
.bac Size: 512B - Virtual size: 260B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.cab Size: 512B - Virtual size: 52B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 336B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ