Static task
static1
Behavioral task
behavioral1
Sample
cab124a5912cca28afdcf69f1aaa2b85d855047ad0b762d32fc5648231565175.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
cab124a5912cca28afdcf69f1aaa2b85d855047ad0b762d32fc5648231565175.exe
Resource
win10v2004-20220812-en
General
-
Target
cab124a5912cca28afdcf69f1aaa2b85d855047ad0b762d32fc5648231565175
-
Size
72KB
-
MD5
6125cada0b665873271e53b76fbc5f30
-
SHA1
c19b9b0210e4203206f2b21fe406d055989b467b
-
SHA256
cab124a5912cca28afdcf69f1aaa2b85d855047ad0b762d32fc5648231565175
-
SHA512
2f27723d242126b46b0637818575af29f45e28b7152e4617aab6febcdaabf37d754e4c1df3dd22ceeafca1bca930b54d7eb7ee4f5c32ba6d3bb06c38d3cd0b84
-
SSDEEP
1536:4O74UUGWpcZkuB9Z8nWgCcmctwyXdPG7qZyhce75DGlW8jS3qCVcew:F4UUGtkuCnVrKElG7qbi5uWQS3qCVcF
Malware Config
Signatures
Files
-
cab124a5912cca28afdcf69f1aaa2b85d855047ad0b762d32fc5648231565175.exe windows x86
8ba474b317a922ff5f00f71a547f99b7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
GetTempPathA
GetTempFileNameA
GetSystemDirectoryA
DeleteFileA
DeviceIoControl
CloseHandle
CreateFileA
WinExec
advapi32
DeleteService
OpenServiceA
StartServiceA
CreateServiceA
CloseServiceHandle
OpenSCManagerA
msvcrt
_snprintf
fclose
fwrite
fopen
sprintf
strncpy
strrchr
_stricmp
_strlwr
shlwapi
SHDeleteValueA
SHSetValueA
setupapi
SetupIterateCabinetA
Sections
.text Size: 42KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 992B - Virtual size: 992B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ani Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE