Static task
static1
Behavioral task
behavioral1
Sample
0c36c2b8c34000fae055aa2b68a340f1391801452e1433f733c78f965239ecc3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0c36c2b8c34000fae055aa2b68a340f1391801452e1433f733c78f965239ecc3.exe
Resource
win10v2004-20220812-en
General
-
Target
0c36c2b8c34000fae055aa2b68a340f1391801452e1433f733c78f965239ecc3
-
Size
58KB
-
MD5
56281d9275ce4d38b74d9b4fe0ca0a4f
-
SHA1
08d85d6b8e22b433a89c753f76b0f7102bcbfbcc
-
SHA256
0c36c2b8c34000fae055aa2b68a340f1391801452e1433f733c78f965239ecc3
-
SHA512
71481f337b0590f32547209344085416143a053aed20f3fab8696c8e903f317cff2829d0f57120d55a92e0b599c54774e2874e0ac3b9cfb66a28e2aaea0a6d8b
-
SSDEEP
768:zLKMpusnGNFjNCS1d5ak6qPWm0mEUyUyCxQlnUL2QjS1iS5efUS09Xwf6MsVpJlL:zEsnbEhjP0mPyUjalULju1ftLXMzcvBB
Malware Config
Signatures
Files
-
0c36c2b8c34000fae055aa2b68a340f1391801452e1433f733c78f965239ecc3.exe windows x86
f07a9e50e4d00f09a736c0dd3fbe78fe
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
__winitenv
exit
_controlfp
_XcptFilter
_exit
_c_exit
wcsncmp
wcscmp
_getche
_wtol
wcscpy
_wcsicmp
wcslen
printf
_except_handler3
_cexit
advapi32
ChangeServiceConfig2W
OpenSCManagerW
StartServiceW
QueryServiceStatusEx
DeleteService
NotifyBootConfigStatus
GetServiceDisplayNameW
GetServiceKeyNameW
EnumServicesStatusW
EnumServiceGroupW
EnumServicesStatusExW
QueryServiceStatus
LockServiceDatabase
UnlockServiceDatabase
QueryServiceLockStatusW
ConvertStringSecurityDescriptorToSecurityDescriptorW
SetServiceObjectSecurity
QueryServiceObjectSecurity
ConvertSecurityDescriptorToStringSecurityDescriptorW
EnumDependentServicesW
CreateServiceW
CloseServiceHandle
ChangeServiceConfigW
ControlService
QueryServiceConfig2W
QueryServiceConfigW
OpenServiceW
kernel32
LocalFree
LocalAlloc
GetLastError
FormatMessageW
GetModuleHandleA
ntdll
RtlAdjustPrivilege
Sections
.text Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.cdata Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE