Static task
static1
Behavioral task
behavioral1
Sample
ad093f538c56cae80ae118d4e038492f391a93905d3bf1d75ff97fafe766dc01.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ad093f538c56cae80ae118d4e038492f391a93905d3bf1d75ff97fafe766dc01.exe
Resource
win10v2004-20220812-en
General
-
Target
ad093f538c56cae80ae118d4e038492f391a93905d3bf1d75ff97fafe766dc01
-
Size
23KB
-
MD5
7fa4f933601e6e5ec7c8ce0a88b463fe
-
SHA1
76b90d8f2874cdb258a7b9d07f1fbfb9be980fd0
-
SHA256
ad093f538c56cae80ae118d4e038492f391a93905d3bf1d75ff97fafe766dc01
-
SHA512
961427da52c14e98a85bc2d328024f54e6ad2fde5c97b4fcbbe9a758c74129049fc0ae9fa8499fa9115b8c4bea08c5e325ba4ac891637d79109020c47b16e381
-
SSDEEP
384:jO8YE6qlfbiUpyD2ZDSa+eXmN5WTrxmO/QdA93TxZVKfna555vp50hPqCW4N:pecbRyTpwxmOHDxZVK/a555vz0ScN
Malware Config
Signatures
Files
-
ad093f538c56cae80ae118d4e038492f391a93905d3bf1d75ff97fafe766dc01.exe windows x86
357b0052fb9c30efb6f0c7de35ee45de
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileAttributesExA
CreateProcessA
Sleep
GetTempFileNameA
SetFileTime
GetTickCount
GetLastError
GetSystemDirectoryA
DeleteFileA
MoveFileExA
DeviceIoControl
CloseHandle
CreateFileA
GetTempPathA
GetWindowsDirectoryA
advapi32
DeleteService
OpenServiceA
StartServiceA
CreateServiceA
CloseServiceHandle
OpenSCManagerA
ControlService
msvcrt
memset
_strlwr
strlen
fclose
fwrite
fopen
strncpy
fread
strcat
strcpy
sprintf
_stricmp
strrchr
rand
srand
_snprintf
shlwapi
SHSetValueA
setupapi
SetupIterateCabinetA
Sections
.text Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 992B - Virtual size: 992B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ