Static task
static1
Behavioral task
behavioral1
Sample
8304dd03a7d078ffc1338b38ce3af99b5bd548d5765228917dadb39cc56c3150.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8304dd03a7d078ffc1338b38ce3af99b5bd548d5765228917dadb39cc56c3150.exe
Resource
win10v2004-20221111-en
General
-
Target
8304dd03a7d078ffc1338b38ce3af99b5bd548d5765228917dadb39cc56c3150
-
Size
10KB
-
MD5
6391da68e9b2a0f4ec8d4e0413d8a1fa
-
SHA1
6b301389f6f3a58d0eab4d51334ed69bd204b7a6
-
SHA256
8304dd03a7d078ffc1338b38ce3af99b5bd548d5765228917dadb39cc56c3150
-
SHA512
c552d15a629f98b8668a5758ba663efe1c8ba5b12df02a52cd5885083ea8bc107ceaa58251d854ea16afa7c22cbeb19d0b29978f6c030d1d5a4cf734a61e5106
-
SSDEEP
96:TL1sno6V6A6ksB5ImbVaGRsC+6cTyNnys/ZTtmKzjraJwJh1/9:TpsnPPIsl9s1tmejGJMh1/
Malware Config
Signatures
Files
-
8304dd03a7d078ffc1338b38ce3af99b5bd548d5765228917dadb39cc56c3150.exe windows x86
839504a3b3e7f0c6f906b22a2933a8e3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
IofCompleteRequest
ZwDeleteFile
KeTickCount
RtlInitUnicodeString
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 128B - Virtual size: 122B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 128B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 256B - Virtual size: 206B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 256B - Virtual size: 220B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ