Static task
static1
Behavioral task
behavioral1
Sample
bcbd68c36ad00f4ea3bbff544eabe58fe38cb5f3b3a6a754c33a1bb4b6e3b9ae.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bcbd68c36ad00f4ea3bbff544eabe58fe38cb5f3b3a6a754c33a1bb4b6e3b9ae.exe
Resource
win10v2004-20220812-en
General
-
Target
bcbd68c36ad00f4ea3bbff544eabe58fe38cb5f3b3a6a754c33a1bb4b6e3b9ae
-
Size
4KB
-
MD5
9b7b5c58ae9f3dbf61dd070c87c53a50
-
SHA1
49a62ed0bbb58cade327f6ed45d3113c8f0f7703
-
SHA256
bcbd68c36ad00f4ea3bbff544eabe58fe38cb5f3b3a6a754c33a1bb4b6e3b9ae
-
SHA512
a65ef48d30af1c48fc98ba23ad00298f180f731fef16f0916f339a740282efb7cbdd6f0a903dde90798da90f5a23e3d239826732086446175f71d3913f08d8a7
-
SSDEEP
48:qZc3Jtsb8srmx9ed1mizQOsEcDXm1eVbRK5tz8s:/TsvrmHem+7sBTg4a4s
Malware Config
Signatures
Files
-
bcbd68c36ad00f4ea3bbff544eabe58fe38cb5f3b3a6a754c33a1bb4b6e3b9ae.exe windows x86
cf5c63b4fd917b896e0ec2d2f329572c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
IoFreeMdl
MmUnmapLockedPages
ZwQuerySystemInformation
DbgPrint
IofCompleteRequest
RtlAssert
MmMapLockedPages
MmBuildMdlForNonPagedPool
MmCreateMdl
KeServiceDescriptorTable
IoDeleteDevice
IoCreateSymbolicLink
IoCreateDevice
KeTickCount
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 257B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 512B - Virtual size: 466B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 234B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ