Static task
static1
Behavioral task
behavioral1
Sample
9005a12d255e796b8e41d807084c12ec3aeb6231787d6509411d03d144cdfd2c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9005a12d255e796b8e41d807084c12ec3aeb6231787d6509411d03d144cdfd2c.exe
Resource
win10v2004-20221111-en
General
-
Target
9005a12d255e796b8e41d807084c12ec3aeb6231787d6509411d03d144cdfd2c
-
Size
9KB
-
MD5
31ba814b5d23ce83ecdb199ace5514b6
-
SHA1
2f43a8c81c135a91a3fe9c44c23badb511bcddac
-
SHA256
9005a12d255e796b8e41d807084c12ec3aeb6231787d6509411d03d144cdfd2c
-
SHA512
d24d31c8717288abbba14bd88848f236f57ad7679ca4b0700a13aa2aa647c19c5570332aaf7e1f19b9437ffac54c2e44965ce80c16131cc0c54ba9ac2ed6599f
-
SSDEEP
192:hCM2BJFnzSR72XCMB78Ae1jUAg5x+y/Ae0:hCHB/y72wtUxM
Malware Config
Signatures
Files
-
9005a12d255e796b8e41d807084c12ec3aeb6231787d6509411d03d144cdfd2c.exe windows x86
139d9692dfe7d307b57e57bde7854360
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
DbgPrint
KeDelayExecutionThread
ZwQuerySystemInformation
_stricmp
ObfReferenceObject
IoGetCurrentProcess
RtlGetVersion
PsGetVersion
PsCreateSystemThread
KeTickCount
KeBugCheckEx
ExAllocatePoolWithTag
ExFreePoolWithTag
hal
KfLowerIrql
KfRaiseIrql
Sections
.text Size: 896B - Virtual size: 875B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 256B - Virtual size: 170B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 128B - Virtual size: 40B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 512B - Virtual size: 510B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 384B - Virtual size: 302B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ