Static task
static1
Behavioral task
behavioral1
Sample
6ae10ce1874a088f317523587f62a677e8a15b5ccbae75e66fa19765a391c476.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6ae10ce1874a088f317523587f62a677e8a15b5ccbae75e66fa19765a391c476.exe
Resource
win10v2004-20220812-en
General
-
Target
6ae10ce1874a088f317523587f62a677e8a15b5ccbae75e66fa19765a391c476
-
Size
139KB
-
MD5
14bb108e6f18f6ecae77a59a5c528b7e
-
SHA1
0306da8228bc5132a8767eaaeb67119f2b2126c2
-
SHA256
6ae10ce1874a088f317523587f62a677e8a15b5ccbae75e66fa19765a391c476
-
SHA512
6d01b32bd3d672699d5b320810642193bce2e681ffce840ad37f210a2abf9858292023b1f03b6502f496970c911c8885665df7f4f23e7c45a5f73365df953de9
-
SSDEEP
3072:RlB+fOqTNO/6GwCuDAUyJLywt7mmjlowz7TBfVlyOKWfTz:Rlk2Ug3t1mmjb7TBtlyOKWfT
Malware Config
Signatures
Files
-
6ae10ce1874a088f317523587f62a677e8a15b5ccbae75e66fa19765a391c476.exe windows x86
974c3a596879f92fe01cc9a10c1dfee3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemDirectoryA
HeapAlloc
GetProcessHeap
HeapReAlloc
HeapFree
SetCurrentDirectoryA
GetSystemTimeAsFileTime
RtlUnwind
InterlockedExchange
VirtualQuery
GetFileAttributesA
GetLastError
CreateFileA
WriteFile
CloseHandle
WritePrivateProfileStringA
GetFullPathNameA
lstrlenA
user32
wvsprintfA
advapi32
CloseServiceHandle
ChangeServiceConfigA
ControlService
OpenServiceA
CreateServiceA
EnumServicesStatusA
OpenSCManagerA
StartServiceA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 133KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE