Static task
static1
Behavioral task
behavioral1
Sample
d4f2ce3a0863713eb783afc6a19df7e02f0161a050ed6437e8f760f29506b903.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d4f2ce3a0863713eb783afc6a19df7e02f0161a050ed6437e8f760f29506b903.exe
Resource
win10v2004-20221111-en
General
-
Target
d4f2ce3a0863713eb783afc6a19df7e02f0161a050ed6437e8f760f29506b903
-
Size
15KB
-
MD5
444f442fa15d5f1e8b997ed63b77bdc3
-
SHA1
cd1948e3586d06831f3d237d4f1a751bca33f3ec
-
SHA256
d4f2ce3a0863713eb783afc6a19df7e02f0161a050ed6437e8f760f29506b903
-
SHA512
29fd69c1958ad034951f1741c9336a36304524b1e2ea3708384d8443229f0e04f39377d3bb568a18e5d3b6df50f32777f7df0a451842d71b0dbf664e2c67516c
-
SSDEEP
384:CHYNtk6WrYWAy8iDbhKAAutBAVoiYSAvG5QvTapM+czZykb:+YNUICBA9t95SGpM5zZ9
Malware Config
Signatures
Files
-
d4f2ce3a0863713eb783afc6a19df7e02f0161a050ed6437e8f760f29506b903.exe windows x86
6138bdb74abc795b0a998eb00778d570
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
__initenv
exit
_cexit
_XcptFilter
_exit
_except_handler3
_c_exit
advapi32
ControlService
OpenServiceW
OpenSCManagerW
NotifyBootConfigStatus
RegisterServiceCtrlHandlerW
StartServiceCtrlDispatcherW
SetServiceStatus
kernel32
SetEvent
ExitThread
WaitForSingleObject
ExitProcess
CreateEventA
GetLastError
GetModuleHandleA
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 108B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE