Static task
static1
Behavioral task
behavioral1
Sample
e5818ba20d5670d14b818ad0b91bb5014b3e24eff0907092610b9258d12839fa.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e5818ba20d5670d14b818ad0b91bb5014b3e24eff0907092610b9258d12839fa.exe
Resource
win10v2004-20221111-en
General
-
Target
e5818ba20d5670d14b818ad0b91bb5014b3e24eff0907092610b9258d12839fa
-
Size
139KB
-
MD5
ff0f339c3895584cf9b6bfcb9e1c1dab
-
SHA1
fb5df497fde74e83bbe65af77733ca7269a9e46b
-
SHA256
e5818ba20d5670d14b818ad0b91bb5014b3e24eff0907092610b9258d12839fa
-
SHA512
54eba5d01f48dc5b746a689f8872994fe1551595a1665a8eae7c75ec5c7d8e85c0f66958a6a1454087c12eaf785b353eb912c2a7b9b4a21311472b95d90df154
-
SSDEEP
3072:RlB+fOqTNO/6GwCuDAUyJLywt7mmjlowz7TBfVlyOKWfTz:Rlk2Ug3t1mmjb7TBtlyOKWfT
Malware Config
Signatures
Files
-
e5818ba20d5670d14b818ad0b91bb5014b3e24eff0907092610b9258d12839fa.exe windows x86
974c3a596879f92fe01cc9a10c1dfee3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemDirectoryA
HeapAlloc
GetProcessHeap
HeapReAlloc
HeapFree
SetCurrentDirectoryA
GetSystemTimeAsFileTime
RtlUnwind
InterlockedExchange
VirtualQuery
GetFileAttributesA
GetLastError
CreateFileA
WriteFile
CloseHandle
WritePrivateProfileStringA
GetFullPathNameA
lstrlenA
user32
wvsprintfA
advapi32
CloseServiceHandle
ChangeServiceConfigA
ControlService
OpenServiceA
CreateServiceA
EnumServicesStatusA
OpenSCManagerA
StartServiceA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 133KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE