Static task
static1
Behavioral task
behavioral1
Sample
49c13d75ef75d54b9ae103826a550ea7962766e5c0cb631ce1ee6e55623afd3f.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
49c13d75ef75d54b9ae103826a550ea7962766e5c0cb631ce1ee6e55623afd3f.exe
Resource
win10v2004-20220812-en
General
-
Target
49c13d75ef75d54b9ae103826a550ea7962766e5c0cb631ce1ee6e55623afd3f
-
Size
8KB
-
MD5
2266d55bb21aea391815a1c2c1bccd70
-
SHA1
eaa9f72fb1e7471c4577f2810a4f7fc8854c625e
-
SHA256
49c13d75ef75d54b9ae103826a550ea7962766e5c0cb631ce1ee6e55623afd3f
-
SHA512
d63ba9c333fee36030c1afa3c1b2020050ca9db2a42a4a6e1032229992ac883f23665cda00568618af0125f4fbb212e7782da284527f85cae484e68120e7a174
-
SSDEEP
192:ZIqQj1nkgppuF3lcfFf5yqGnHLSX9qir:SNj1nk/lcffyqweZr
Malware Config
Signatures
Files
-
49c13d75ef75d54b9ae103826a550ea7962766e5c0cb631ce1ee6e55623afd3f.exe windows x86
5d4cc3246a62038daa97a5e5b548580f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
CloseServiceHandle
CreateServiceA
DeleteService
OpenServiceA
StartServiceA
ControlService
OpenSCManagerA
kernel32
CloseHandle
CreateFileA
GetLastError
Sections
.text Size: 1024B - Virtual size: 677B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE