Static task
static1
Behavioral task
behavioral1
Sample
530014ff8d9863ad98a084acc2121ac12f8912363d7e62abb794d6325dd2e39a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
530014ff8d9863ad98a084acc2121ac12f8912363d7e62abb794d6325dd2e39a.exe
Resource
win10v2004-20220812-en
General
-
Target
530014ff8d9863ad98a084acc2121ac12f8912363d7e62abb794d6325dd2e39a
-
Size
77KB
-
MD5
49cf4a78f5b9fc457dd0192e324bb7a9
-
SHA1
ef9f6c3f517713265f9c6316dffcb6be976b90dc
-
SHA256
530014ff8d9863ad98a084acc2121ac12f8912363d7e62abb794d6325dd2e39a
-
SHA512
641c25457b435020670771ab49c5159f6e66146ebeb3ec7c303d69480919b199e51c3d2c3f076b6db98618dad83f2e558fa61a3a37a6f8733d42e6a011330012
-
SSDEEP
1536:Df/QBG5lnYwxQm/LYmOysmYb5l5ouFMBEwt5U8+lowWJeF/MjxK3Uu:DXCG5lYwFLYmOysmY5PMBZSPHn0jE3Uu
Malware Config
Signatures
Files
-
530014ff8d9863ad98a084acc2121ac12f8912363d7e62abb794d6325dd2e39a.exe windows x86
4d5ca666e333299d80e2e05c2afd96f3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
DbgPrint
ExAllocatePool
ExFreePool
Sections
.text Size: - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 76KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE