ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
769403769d489788d28a1bb5168fe615ee79ad777d304085688563471a6d954a.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
769403769d489788d28a1bb5168fe615ee79ad777d304085688563471a6d954a.dll
Resource
win10v2004-20220812-en
General
-
Target
769403769d489788d28a1bb5168fe615ee79ad777d304085688563471a6d954a
-
Size
7KB
-
MD5
58eb9ea7ad0a8a353c5890a67483375b
-
SHA1
1606aaed8965b3a8ce552f1e440e7d3ecd20d6ca
-
SHA256
769403769d489788d28a1bb5168fe615ee79ad777d304085688563471a6d954a
-
SHA512
c8d292af634540248b63852489377a072238b05b19d5353b65146dd6e8bbf75af64f59d6f6c0a7a4e6069d19dd38964f72b8159d9abb23e95477ccccba9646fe
-
SSDEEP
48:C2mX7scYnKFVhEjHu4mDvhxdJxN/m7DVRB5ps9L2I1IZWM4as5WwG2s4:uWkQuHhxzxUZ61EWzawWwG3
Malware Config
Signatures
Files
-
769403769d489788d28a1bb5168fe615ee79ad777d304085688563471a6d954a.dll windows x86
18b348a4ccf6213962dcc4cab62dd37d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
OpenProcessToken
SetServiceStatus
RegisterServiceCtrlHandlerA
CreateProcessAsUserA
kernel32
Process32Next
CloseHandle
lstrcatA
GetWindowsDirectoryA
OpenProcess
lstrcmpiA
Process32First
CreateToolhelp32Snapshot
Sleep
ReleaseMutex
GetLastError
CreateMutexA
Exports
Exports
Sections
.text Size: 1024B - Virtual size: 784B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 649B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 312B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 712B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 134B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ