Static task
static1
Behavioral task
behavioral1
Sample
e75a149f3a7600d685879f9d04db086ff771e6f9200c0225b7509ccea4862e28.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e75a149f3a7600d685879f9d04db086ff771e6f9200c0225b7509ccea4862e28.exe
Resource
win10v2004-20220812-en
General
-
Target
e75a149f3a7600d685879f9d04db086ff771e6f9200c0225b7509ccea4862e28
-
Size
20KB
-
MD5
936d2d5a1428fbec5d8a5377f399f5b0
-
SHA1
f1a41cde2630c03ee02ea6ad9308dbcd1fef73f1
-
SHA256
e75a149f3a7600d685879f9d04db086ff771e6f9200c0225b7509ccea4862e28
-
SHA512
75449ec866b948f900007f4678c2098f3e2090cdfcbefae7b5503d7fa8c5b00539cefe9c2cb176f1b9df6a69fe28762373f69e2101c7ec0c8482db9b85cd362e
-
SSDEEP
192:seFMxMPk4/8iFyZUtSztgLfJ6vz9VP4oyn:VFMxMPk4/+ZUwxCfJ6vT4
Malware Config
Signatures
Files
-
e75a149f3a7600d685879f9d04db086ff771e6f9200c0225b7509ccea4862e28.exe windows x86
e444af4df8cfb87ec92af97cdf7dd7b1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
GetConsoleWindow
GetModuleFileNameA
Sleep
advapi32
RegCloseKey
RegSetValueExA
RegOpenKeyExA
RegisterServiceCtrlHandlerExA
StartServiceCtrlDispatcherA
ChangeServiceConfig2A
CloseServiceHandle
CreateServiceA
OpenSCManagerA
ControlService
OpenServiceA
SetServiceStatus
user32
ShowWindow
msvcrt
__p___initenv
_controlfp
__CxxFrameHandler
??3@YAXPAX@Z
_exit
_XcptFilter
exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ