Static task
static1
Behavioral task
behavioral1
Sample
3fc11ce52810db83880ed3baae08c842359b3b0bba73220b96a6ad0171093cb3.exe
Resource
win7-20220812-en
General
-
Target
3fc11ce52810db83880ed3baae08c842359b3b0bba73220b96a6ad0171093cb3
-
Size
128KB
-
MD5
3034a520c05e505db4cc2e8b37da7336
-
SHA1
b39aab7c63b873cfd5256130bd2eda0cd3a2e9c1
-
SHA256
3fc11ce52810db83880ed3baae08c842359b3b0bba73220b96a6ad0171093cb3
-
SHA512
98c4a045b3a79416bf720bc9285cce1595e749c49da0d33f1fca99e21785eadb2023a62a4c5552c51dde48de13540d00bc109487d683cff15778d9d554da5a0f
-
SSDEEP
3072:ryGAb5186U5t38aUx7MMpqJfaV618k6WncsgcHXYWDAY:ryXb518LlUxKfDrncsLoWAY
Malware Config
Signatures
Files
-
3fc11ce52810db83880ed3baae08c842359b3b0bba73220b96a6ad0171093cb3.exe windows x86
065be29be7591a289637fd3a77f33f10
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
DeregisterEventSource
ReportEventA
RegisterEventSourceA
SetServiceStatus
CloseServiceHandle
CreateServiceA
OpenSCManagerA
StartServiceA
OpenServiceA
DeleteService
QueryServiceStatus
ControlService
RegisterServiceCtrlHandlerA
StartServiceCtrlDispatcherA
msvcr90
_controlfp_s
_invoke_watson
_except_handler4_common
_decode_pointer
_onexit
_lock
__dllonexit
_unlock
?terminate@@YAXXZ
__set_app_type
_encode_pointer
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
__initenv
exit
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
_vsnprintf
printf
sprintf
memset
_stricmp
_crt_debugger_hook
kernel32
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
InterlockedExchange
SetConsoleCtrlHandler
GetModuleFileNameA
FormatMessageA
lstrlenA
LocalFree
GetLastError
WaitForSingleObject
SetLastError
FindFirstFileA
GetStartupInfoA
CreateFileA
SetFilePointer
GetStdHandle
CreateProcessA
Sleep
FindNextFileA
FindClose
SetEvent
CloseHandle
CreateEventA
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 114KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE