Static task
static1
Behavioral task
behavioral1
Sample
807518bc1aa0c1506456db82e5aadb2c1bb916be5e8220a3b49a6427e28d957d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
807518bc1aa0c1506456db82e5aadb2c1bb916be5e8220a3b49a6427e28d957d.exe
Resource
win10v2004-20220901-en
General
-
Target
807518bc1aa0c1506456db82e5aadb2c1bb916be5e8220a3b49a6427e28d957d
-
Size
63KB
-
MD5
185f78fb7f767ee3183135de607d04c1
-
SHA1
fda6388ce4f72c6560188b3bb18c97f3be3b0d21
-
SHA256
807518bc1aa0c1506456db82e5aadb2c1bb916be5e8220a3b49a6427e28d957d
-
SHA512
3e0563b5f14c61e2bee69c194e2b55791ef2bf4548a746400238df8f11c971b2d8bffd90cab82fe55e9194f358ec186f7e911ec0094daf51d111cfa8e3c35792
-
SSDEEP
1536:K/qvxc1x49XgTzWqeaSSXW/jOG+sFFfuK2pBeoIKsD1:K6yx49cz1LejIsFFgdC1
Malware Config
Signatures
Files
-
807518bc1aa0c1506456db82e5aadb2c1bb916be5e8220a3b49a6427e28d957d.exe windows x86
583946506d62ff4d75f03bdfa26a6f1f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
StrChrA
StrStrA
StrToIntA
user32
PostThreadMessageA
wsprintfA
advapi32
CloseServiceHandle
OpenSCManagerA
OpenServiceA
QueryServiceStatus
ControlService
DeleteService
ole32
CoCreateGuid
msvcrt
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_initterm
__getmainargs
exit
_XcptFilter
_exit
__CxxFrameHandler
fopen
fwrite
fclose
memcpy
time
srand
rand
memset
??2@YAPAXI@Z
??3@YAXPAX@Z
_acmdln
kernel32
SetFilePointer
GetModuleFileNameA
DeleteFileA
GetModuleHandleA
GetStartupInfoA
ReadFile
CreateMutexA
GetLastError
GetFileAttributesExA
ReleaseMutex
lstrlenA
Sleep
LoadLibraryA
GetProcAddress
FreeLibrary
CreateFileA
WriteFile
lstrcpyA
GetSystemDirectoryA
lstrcatA
CloseHandle
GetFileTime
WaitForSingleObject
SetFileTime
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE