Static task
static1
Behavioral task
behavioral1
Sample
8eb7bff014ca2116791df94ea37334a689e618034aeed3cc680b7870a8e24e3e.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8eb7bff014ca2116791df94ea37334a689e618034aeed3cc680b7870a8e24e3e.exe
Resource
win10v2004-20221111-en
General
-
Target
8eb7bff014ca2116791df94ea37334a689e618034aeed3cc680b7870a8e24e3e
-
Size
60KB
-
MD5
83dc0b18f5db7bdc7d7bd93e67d7576a
-
SHA1
d32c28b553591aae1df3f4a0185286121a2c4a3f
-
SHA256
8eb7bff014ca2116791df94ea37334a689e618034aeed3cc680b7870a8e24e3e
-
SHA512
a90f244afaaa88643470441e3ca40966a8a96670ca4d517a74d106d3a4f937b71ebd50f033ba84f164f5be4997c729de4b8ac8871179c85cceef1486b32414dc
-
SSDEEP
768:v9sylBlbveSDC8xnkmUOvHvSA4kpsD5XagqVYcLpviAOtSq0LbrD4oSboKy8JRR:Dl1uHOn1ZO5dcNtOtv0AK4R/d7hp6
Malware Config
Signatures
Files
-
8eb7bff014ca2116791df94ea37334a689e618034aeed3cc680b7870a8e24e3e.exe windows x86
e69fa2c247a9881cdef59e3181fa1676
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
hal
KeQueryPerformanceCounter
ntoskrnl.exe
KeGetCurrentThread
KeTickCount
IoGetCurrentProcess
KeInitializeSpinLock
MmQuerySystemSize
KeInitializeMutex
PsGetVersion
KeInitializeEvent
PsGetCurrentProcessId
PsGetCurrentThreadId
KeQueryActiveProcessors
KeInitializeTimer
Sections
.text Size: 57KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 256B - Virtual size: 240B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 128B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 512B - Virtual size: 422B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 896B - Virtual size: 824B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ