Static task
static1
Behavioral task
behavioral1
Sample
d0f89eca7ae98fe06481040c6f398446db4ca7bbccd51bba86c1aae06e746e0d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d0f89eca7ae98fe06481040c6f398446db4ca7bbccd51bba86c1aae06e746e0d.exe
Resource
win10v2004-20220812-en
General
-
Target
d0f89eca7ae98fe06481040c6f398446db4ca7bbccd51bba86c1aae06e746e0d
-
Size
140KB
-
MD5
8602fa3edffbe922bd439254e9df185b
-
SHA1
54021683abde9edd943cd6d2b2a02ac98af151a8
-
SHA256
d0f89eca7ae98fe06481040c6f398446db4ca7bbccd51bba86c1aae06e746e0d
-
SHA512
3361c91746c0d0f6dabd4eb43540460651ea6461ab64e6cbecfff468cce625697544827769a797f8ea0ff3c2e892bcb3279783b049c2d94f86fe532846c5e3ae
-
SSDEEP
3072:KZr9iwf66M7PVPUb4K2tRYFLVofJLvu+VAXQY/tX6uC:KRE8qRPV1aFLVofl2+Ved6H
Malware Config
Signatures
Files
-
d0f89eca7ae98fe06481040c6f398446db4ca7bbccd51bba86c1aae06e746e0d.exe windows x86
ab70b8484fadc9272625e1e2f86c267a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetShortPathNameA
lstrcpyA
WriteFile
lstrcatA
GetEnvironmentVariableA
CreateFileA
CloseHandle
GetModuleFileNameA
advapi32
CloseServiceHandle
OpenSCManagerA
CreateServiceA
OpenServiceA
StartServiceA
shell32
ShellExecuteA
user32
wsprintfA
Sections
.data Size: 155KB - Virtual size: 155KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE