Static task
static1
Behavioral task
behavioral1
Sample
de0e5c4c4dd614c3603411a9ebbe536c491c32284a9a208acaf8729739cfff79.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
de0e5c4c4dd614c3603411a9ebbe536c491c32284a9a208acaf8729739cfff79.exe
Resource
win10v2004-20220901-en
General
-
Target
de0e5c4c4dd614c3603411a9ebbe536c491c32284a9a208acaf8729739cfff79
-
Size
57KB
-
MD5
0ba834378a92f9d05a0ba06991ae562f
-
SHA1
95b9ebeea70b6c2a6fbf50e2b21c9beb7c14b6b3
-
SHA256
de0e5c4c4dd614c3603411a9ebbe536c491c32284a9a208acaf8729739cfff79
-
SHA512
5cb08e5b70bb644cc73ce3981fb2df45b1deba35cb55e6967cc81fd1a97a8d5f99502dc8cb043584dfce55647c457815630cc07f504d8c0bad387bd305c343d6
-
SSDEEP
1536:BM4nbtSY+A37feaCMJDmYsLIb4PvYqHB/AdGV:B5tSDADeak7dJHB/AdGV
Malware Config
Signatures
Files
-
de0e5c4c4dd614c3603411a9ebbe536c491c32284a9a208acaf8729739cfff79.exe windows x86
cd8bda3aa128ad44cb0c91d94a1f73bb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
advapi32
DeleteService
CreateServiceA
ControlService
OpenSCManagerA
StartServiceA
QueryServiceStatus
CloseServiceHandle
OpenServiceA
kernel32
GetStdHandle
VirtualFree
VirtualAlloc
WriteFile
GetFileType
GetStartupInfoA
FlushFileBuffers
SetFilePointer
SetStdHandle
CloseHandle
RtlUnwind
GetModuleFileNameA
UnhandledExceptionFilter
GetEnvironmentStrings
ExitProcess
GetCommandLineA
WideCharToMultiByte
GetVersion
GetLastError
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 794B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ