Static task
static1
Behavioral task
behavioral1
Sample
04d6827c5e7bb4b87515bea8362a7fa801a2d547f61f266d82124a976af89c0a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
04d6827c5e7bb4b87515bea8362a7fa801a2d547f61f266d82124a976af89c0a.exe
Resource
win10v2004-20220812-en
General
-
Target
04d6827c5e7bb4b87515bea8362a7fa801a2d547f61f266d82124a976af89c0a
-
Size
110KB
-
MD5
063aa87b5e7242d09449e0e66768ffb6
-
SHA1
2d6e391e782ff6782c83cb167264b54c4cc738d0
-
SHA256
04d6827c5e7bb4b87515bea8362a7fa801a2d547f61f266d82124a976af89c0a
-
SHA512
04b6d106fca51765f5cddc304caa5a8bd8a5eb6f0d3f4a47f2d4b2bae50a48d700cabf9b87557e810c3ad3c9ab45dddf6ae3a40e9a6ca0e94d6360e80517b571
-
SSDEEP
3072:vbtzaDqdoZW7jF0rP4omrqT3hEBI6G6jozvFxtwIGZwnF+FgD:BOZP4omrC3IXozvFxtbF+Q
Malware Config
Signatures
Files
-
04d6827c5e7bb4b87515bea8362a7fa801a2d547f61f266d82124a976af89c0a.exe windows x86
1299b4d05c25c6e1bcb5d53f5d61ec44
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
StrChrA
StrStrA
StrToIntA
user32
PostThreadMessageA
wsprintfA
advapi32
DeleteService
OpenSCManagerA
OpenServiceA
CloseServiceHandle
QueryServiceStatus
ControlService
ole32
CoCreateGuid
msvcrt
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_adjust_fdiv
__setusermatherr
_initterm
_acmdln
exit
_XcptFilter
_exit
__CxxFrameHandler
time
srand
rand
memcpy
memset
??2@YAPAXI@Z
??3@YAXPAX@Z
__getmainargs
kernel32
SetFilePointer
GetModuleFileNameA
DeleteFileA
GetModuleHandleA
GetStartupInfoA
ReadFile
CreateMutexA
GetLastError
GetFileAttributesExA
ReleaseMutex
lstrcpyA
lstrlenA
Sleep
LoadLibraryA
GetProcAddress
FreeLibrary
CreateFileA
WriteFile
GetSystemDirectoryA
lstrcatA
WaitForSingleObject
CloseHandle
GetFileTime
SetFileTime
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE