Static task
static1
Behavioral task
behavioral1
Sample
875a09d9e05fa7c3874f9ab19be9612a3f20a63e16393892d43fe90be4025dba.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
875a09d9e05fa7c3874f9ab19be9612a3f20a63e16393892d43fe90be4025dba.exe
Resource
win10v2004-20220812-en
General
-
Target
875a09d9e05fa7c3874f9ab19be9612a3f20a63e16393892d43fe90be4025dba
-
Size
90KB
-
MD5
810900ed9bafe35cf1b9002e6e206297
-
SHA1
a52fc80dd59d2f9fa580f6f3477ab55b6e9dd2d5
-
SHA256
875a09d9e05fa7c3874f9ab19be9612a3f20a63e16393892d43fe90be4025dba
-
SHA512
846ab792748b79c082aa8abfc8791f2c413bfec70b6305c5f06ec5f225a2526552b1f693691a7d32e71081e6e82ac0ed91ce11a8c317609f2f4e86e921ec7ecb
-
SSDEEP
1536:WOFce5ju4XqkRODWRx0dnvWVJx8lYedkON879SwEx3s41pb7BLVG9D2hOYax2hb0:WOFcEi4XqkROkx0duVHSLa7UNx3s41pS
Malware Config
Signatures
Files
-
875a09d9e05fa7c3874f9ab19be9612a3f20a63e16393892d43fe90be4025dba.exe windows x86
8486d95d07f7ba506aba109106118ec9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemDirectoryA
Sleep
GetWindowsDirectoryA
RtlUnwind
ExitProcess
SetConsoleMode
ReadConsoleInputA
GetConsoleMode
GetCommandLineA
GetVersion
MultiByteToWideChar
LCMapStringA
WideCharToMultiByte
LCMapStringW
CreateFileA
CloseHandle
GetLastError
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetACP
GetOEMCP
SetHandleCount
GetFileType
GetStdHandle
GetStartupInfoA
HeapCreate
WriteFile
HeapAlloc
HeapFree
GetStringTypeA
GetStringTypeW
GetProcAddress
LoadLibraryA
FlushFileBuffers
SetFilePointer
SetStdHandle
DeleteFileA
advapi32
StartServiceA
OpenServiceA
CreateServiceA
CloseServiceHandle
ControlService
OpenSCManagerA
DeleteService
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 105B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 63KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE