Static task
static1
Behavioral task
behavioral1
Sample
5f00c7115e62621d236a83594b212f210e47f3035f86f8f99bcd5cb7d76b609e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5f00c7115e62621d236a83594b212f210e47f3035f86f8f99bcd5cb7d76b609e.exe
Resource
win10v2004-20220812-en
General
-
Target
5f00c7115e62621d236a83594b212f210e47f3035f86f8f99bcd5cb7d76b609e
-
Size
71KB
-
MD5
3dd4a9adf8d3237dc6df6a80112425e3
-
SHA1
e15f542335a2c1da4cd11e87e6a7ae9a7fd75ae9
-
SHA256
5f00c7115e62621d236a83594b212f210e47f3035f86f8f99bcd5cb7d76b609e
-
SHA512
2d7ccf80e9293120296f48fe635622f1944a57aaf90b7baad8e61cd66c59dd11f6f40127184575dec08f44b774ef6442c0345e15e30fa23668a3dd51d3d52f98
-
SSDEEP
1536:OqS6v4EfxBDEeretIuWj56z/ShPcmg7KU4rOF:HS6AE5hEejuWl6wP1/1
Malware Config
Signatures
Files
-
5f00c7115e62621d236a83594b212f210e47f3035f86f8f99bcd5cb7d76b609e.exe windows x86
b95151bd1169f99c30c59a011cecd411
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcr71
__p__commode
__p__fmode
__set_app_type
_exit
_adjust_fdiv
__dllonexit
_onexit
_controlfp
__setusermatherr
_initterm
__getmainargs
_amsg_exit
__p___initenv
_XcptFilter
exit
_cexit
_c_exit
realloc
strcpy
memcpy
strlen
calloc
free
memset
_splitpath
fclose
fopen
fprintf
sprintf
_vsnprintf
localtime
strftime
time
_except_handler3
_iob
_stricmp
kernel32
CreateEventA
GetModuleHandleA
CloseHandle
WaitForSingleObject
GetTickCount
SetEvent
GetLastError
GetModuleFileNameA
advapi32
DeleteService
CreateServiceA
ChangeServiceConfigA
RegCloseKey
RegSetValueExA
StartServiceA
EnumServicesStatusA
OpenSCManagerA
CloseServiceHandle
OpenServiceA
QueryServiceConfigA
QueryServiceStatus
RegCreateKeyExA
RegQueryValueExA
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerA
SetServiceStatus
ControlService
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 54KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE