Static task
static1
Behavioral task
behavioral1
Sample
9d30141bf09df20242e2d15c394ba9e9dd2611c4ecd07dcc4a5c22f9547d07c9.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9d30141bf09df20242e2d15c394ba9e9dd2611c4ecd07dcc4a5c22f9547d07c9.exe
Resource
win10v2004-20221111-en
General
-
Target
9d30141bf09df20242e2d15c394ba9e9dd2611c4ecd07dcc4a5c22f9547d07c9
-
Size
30KB
-
MD5
9993c0ff2a0a7e73478cc5da4b5f1a77
-
SHA1
3dc8e84c5ef23509439f5ba09928d2f619025837
-
SHA256
9d30141bf09df20242e2d15c394ba9e9dd2611c4ecd07dcc4a5c22f9547d07c9
-
SHA512
4ab87f0cf1690b4a28452b0184510d6fcf176fa14f6378c3b225bc5e07fe84c543f921045014987a9faa73854237325f3f2a578f76a3565cb5d1eaf275d27714
-
SSDEEP
384:O8POOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOh:O8+eP695GeP6uhS81SUhCBkd9OLw3
Malware Config
Signatures
Files
-
9d30141bf09df20242e2d15c394ba9e9dd2611c4ecd07dcc4a5c22f9547d07c9.exe windows x86
9e8912ab17aaf9af3d333097695eebe0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
RtlInitUnicodeString
RtlRandom
RtlCopyUnicodeString
RtlAppendUnicodeToString
MmGetSystemRoutineAddress
Sections
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 256B - Virtual size: 134B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 256B - Virtual size: 194B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 256B - Virtual size: 198B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ