Static task
static1
Behavioral task
behavioral1
Sample
winservices.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
winservices.exe
Resource
win10v2004-20220414-en
General
-
Target
winservices.exe
-
Size
293KB
-
MD5
a2585bf4942a42f05138655b88554846
-
SHA1
5d8a9f833f1fdd52096207e21afe5f9b7653180c
-
SHA256
a3fbfe25541744380cb53a2faca2d7c61f8e9973520e82acb379127a99db867d
-
SHA512
b83d318454cb6cee7cb6d71962bd5a9d5d73bf34fba0a4527578534848f1f3d35e20ebb75551eedf608eb17689499be88a58209811479f3fe7c494907f65aa24
-
SSDEEP
3072:h4/atbwJwWHckkp7eAa697AhKgddP8ndMSo/s/cHqhgFqx09mw42K3JlB5lhYkg0:gatcwFkkp7eAa697AhKgddP0pPqoj8
Malware Config
Signatures
Files
-
winservices.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 112KB - Virtual size: 111KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 180KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ