Static task
static1
Behavioral task
behavioral1
Sample
f210f8edbd7507740187445e79ff60dd86705dce0fcf243d58bf1e05c437383e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f210f8edbd7507740187445e79ff60dd86705dce0fcf243d58bf1e05c437383e.exe
Resource
win10v2004-20220812-en
General
-
Target
f210f8edbd7507740187445e79ff60dd86705dce0fcf243d58bf1e05c437383e
-
Size
8KB
-
MD5
5971788fb840ffc17d35ab3931abccc5
-
SHA1
59e3689be766f89b9a4a88fe5f2bf384c7512e37
-
SHA256
f210f8edbd7507740187445e79ff60dd86705dce0fcf243d58bf1e05c437383e
-
SHA512
cb13b58c7bdd49ab023b48e616f67071aca19c11a24c32e51b356d07b1f07a3a359d383d86c407fddc15dd62614f65a9a112c78b42c95f59c5ecfbfd17f29c52
-
SSDEEP
192:ca15MgNXgp8sOzSFSSXvynm6sXBL7W2kTOx8kusrmc8OU:cudc8sO0ynm6CjmrN
Malware Config
Signatures
Files
-
f210f8edbd7507740187445e79ff60dd86705dce0fcf243d58bf1e05c437383e.exe windows x86
fb73ac73ebbba62feec09dec2e65aa72
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ndis.sys
NdisGetSystemUpTime
NdisRegisterProtocol
ntoskrnl.exe
MmBuildMdlForNonPagedPool
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 176B - Virtual size: 164B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 400B - Virtual size: 386B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 704B - Virtual size: 694B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ