Static task
static1
Behavioral task
behavioral1
Sample
a701d08eb991bec24a7a82df165435f22eb0d8e48428162b09a6259098393e37.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a701d08eb991bec24a7a82df165435f22eb0d8e48428162b09a6259098393e37.exe
Resource
win10v2004-20220812-en
General
-
Target
a701d08eb991bec24a7a82df165435f22eb0d8e48428162b09a6259098393e37
-
Size
1KB
-
MD5
a1a553980aceb00e358497609ad067b8
-
SHA1
dde5895d45c66b41dcb0c1e7f7c3ead11cbf8bd6
-
SHA256
a701d08eb991bec24a7a82df165435f22eb0d8e48428162b09a6259098393e37
-
SHA512
edc9b41d042d0eb2c44ecdc218f68e9f84f982693f3cd61a48e56bc248c49c2bfc2e98273c6228921d5d4e871fd81a5740c2d8fcd4bd0509dca7bdc37916f90e
Malware Config
Signatures
Files
-
a701d08eb991bec24a7a82df165435f22eb0d8e48428162b09a6259098393e37.exe windows x86
2869f333d694d5bcd7c997682c5463b1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
IoDeleteSymbolicLink
RtlInitUnicodeString
IoDeleteDevice
MmGetSystemRoutineAddress
ZwClose
IofCompleteRequest
ZwOpenProcess
IoCreateSymbolicLink
IoCreateDevice
ZwTerminateProcess
Sections
.text Size: 448B - Virtual size: 442B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 184B - Virtual size: 182B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 304B - Virtual size: 304B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 72B - Virtual size: 72B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ