Static task
static1
Behavioral task
behavioral1
Sample
818858600fdc05cca30cc26713ca80023ee9b074db82b6ac957e8f48667ad31f.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
818858600fdc05cca30cc26713ca80023ee9b074db82b6ac957e8f48667ad31f.exe
Resource
win10v2004-20220812-en
General
-
Target
818858600fdc05cca30cc26713ca80023ee9b074db82b6ac957e8f48667ad31f
-
Size
66KB
-
MD5
2a5af3636a4a64d405b42b36769cdc5b
-
SHA1
ad800341af1f1cb453eab4e2a8e147ce1c3ae553
-
SHA256
818858600fdc05cca30cc26713ca80023ee9b074db82b6ac957e8f48667ad31f
-
SHA512
c6485656e6950fc8407ccbf214a818cff97692b6357142c685f7902fab6d3134761a68d6f576a1b2dc842118d1df29e7c6f939e9a96da4fa6542ee26f43bf413
-
SSDEEP
1536:JQXA6AVPzhp5RNtN5/JwCZEZ2wFcfR3S7GqGIq82J:SGpzhpznNwewFss7GqG7
Malware Config
Signatures
Files
-
818858600fdc05cca30cc26713ca80023ee9b074db82b6ac957e8f48667ad31f.exe windows x86
929a2ebc048f16b428626eed3b9de606
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTempPathA
GetWindowsDirectoryA
GetTickCount
GetModuleFileNameA
GetProcessHeap
HeapReAlloc
HeapFree
CreateFileA
WriteFile
CloseHandle
HeapAlloc
CreateProcessA
advapi32
CreateServiceA
CloseServiceHandle
StartServiceA
OpenSCManagerA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 626B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 59KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 760B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ