Static task
static1
Behavioral task
behavioral1
Sample
a83a290a3127732cc9b620bbf2d698ba24fdd6e4de001473be1c0580722168eb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a83a290a3127732cc9b620bbf2d698ba24fdd6e4de001473be1c0580722168eb.exe
Resource
win10v2004-20220812-en
General
-
Target
a83a290a3127732cc9b620bbf2d698ba24fdd6e4de001473be1c0580722168eb
-
Size
32KB
-
MD5
4ca5e5856323bc928725f209d0bd6fc1
-
SHA1
ab4f083697fbe6b427c765c6915bd799f463588c
-
SHA256
a83a290a3127732cc9b620bbf2d698ba24fdd6e4de001473be1c0580722168eb
-
SHA512
8f868a1702febce7c9093afb0a4a778d036c9f9a2555e15b7bca4cde01b985658547534362f6a593fff768a33c1cd179cce06eb9bc1acd2f038edd60f75d5c8b
-
SSDEEP
768:T4ElBRLx8yAzkABEG+rY/qqS0zK/OsN57e0Q+H:TvdnAwABE9YSqzzyHNde0Q+H
Malware Config
Signatures
Files
-
a83a290a3127732cc9b620bbf2d698ba24fdd6e4de001473be1c0580722168eb.exe windows x86
b51d29b3530d25827573676942998e55
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
memcpy
ExFreePoolWithTag
ExAllocatePoolWithTag
ZwQuerySystemInformation
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 256B - Virtual size: 145B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 256B - Virtual size: 156B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 128B - Virtual size: 110B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ