Static task
static1
Behavioral task
behavioral1
Sample
e91372056cbab4986e3519c5857b0e1ff8136ad98244ee288f7e4ed4e4266b2d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e91372056cbab4986e3519c5857b0e1ff8136ad98244ee288f7e4ed4e4266b2d.exe
Resource
win10v2004-20220812-en
General
-
Target
e91372056cbab4986e3519c5857b0e1ff8136ad98244ee288f7e4ed4e4266b2d
-
Size
419KB
-
MD5
7661dc1d0aea51967051a3b47b6cdf04
-
SHA1
a70d7efbfde5bc761c1e43dc1ae919ae33c91ac9
-
SHA256
e91372056cbab4986e3519c5857b0e1ff8136ad98244ee288f7e4ed4e4266b2d
-
SHA512
015d519f871166fd5f11ecd1fc46c11af1c990c6a004a4f5d394cfe173db05d8e268ec3f4d4da7f84925b81d0b1e7c62de6f445ebec6e459cfafe532e80e5427
-
SSDEEP
12288:KfA44+GXWofT02+37kvfX0TNiCRB5jBr0:yA0C2YvfX0TNN56
Malware Config
Signatures
Files
-
e91372056cbab4986e3519c5857b0e1ff8136ad98244ee288f7e4ed4e4266b2d.exe windows x86
d145eda073507ae1ace4061ca7a2a015
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteFile
GetCurrentProcess
GetSystemDirectoryA
GetLastError
CreateFileA
CloseHandle
advapi32
CloseServiceHandle
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
OpenSCManagerA
StartServiceA
CreateServiceA
OpenServiceA
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 484B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE