Static task
static1
Behavioral task
behavioral1
Sample
3a848b4e494709b081ed660a9a788496c031901b3eaf2f4285866d75eb416d67.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
3a848b4e494709b081ed660a9a788496c031901b3eaf2f4285866d75eb416d67.exe
Resource
win10v2004-20221111-en
General
-
Target
3a848b4e494709b081ed660a9a788496c031901b3eaf2f4285866d75eb416d67
-
Size
43KB
-
MD5
4f9f2fd9e45f6b5366618d3467ef7f60
-
SHA1
da8d0a9437b5bc0ec6b967031ac7dd6eab969e04
-
SHA256
3a848b4e494709b081ed660a9a788496c031901b3eaf2f4285866d75eb416d67
-
SHA512
6a639b1fd9c5f281e797e6cd632bf669cda4db748c67edefda640fd4c5d8f7ee6c55dbfb01dadd624fc7fe59507c864256f4178afaadb1aad501b0b6186be349
-
SSDEEP
768:S13KMpusnG2FZXbhbUCOH2A/GWRIg2maHikxS6TUYK0yn/:S14snlOHhrqHVBTUY2n/
Malware Config
Signatures
Files
-
3a848b4e494709b081ed660a9a788496c031901b3eaf2f4285866d75eb416d67.exe windows x86
15b7db8e6cd545c3c8113dfcd89d34e9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_c_exit
wcsncmp
wcscmp
_exit
_wtol
wcscpy
_wcsicmp
wcslen
_XcptFilter
_cexit
exit
__winitenv
__wgetmainargs
_initterm
__setusermatherr
_adjust_fdiv
printf
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_getche
advapi32
QueryServiceObjectSecurity
OpenSCManagerW
StartServiceW
QueryServiceStatusEx
DeleteService
NotifyBootConfigStatus
GetServiceDisplayNameW
GetServiceKeyNameW
EnumServicesStatusW
EnumServiceGroupW
EnumServicesStatusExW
QueryServiceStatus
LockServiceDatabase
UnlockServiceDatabase
QueryServiceLockStatusW
ConvertStringSecurityDescriptorToSecurityDescriptorW
SetServiceObjectSecurity
ConvertSecurityDescriptorToStringSecurityDescriptorW
EnumDependentServicesW
CreateServiceW
CloseServiceHandle
ChangeServiceConfigW
ControlService
RegOpenKeyExW
RegQueryValueExW
QueryServiceConfigW
OpenServiceW
QueryServiceConfig2W
ChangeServiceConfig2W
ConvertSidToStringSidW
RegCloseKey
kernel32
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
LoadLibraryW
GetProcAddress
FreeLibrary
LocalFree
LocalAlloc
GetLastError
FormatMessageW
GetModuleHandleA
ntdll
RtlInitUnicodeString
RtlAdjustPrivilege
RtlNtStatusToDosError
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE