Static task
static1
Behavioral task
behavioral1
Sample
a3d0a7a00f34508b2a48aa614f86e87c09d908bcbb293f70f64e02c19e04bbbd.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a3d0a7a00f34508b2a48aa614f86e87c09d908bcbb293f70f64e02c19e04bbbd.exe
Resource
win10v2004-20220812-en
General
-
Target
a3d0a7a00f34508b2a48aa614f86e87c09d908bcbb293f70f64e02c19e04bbbd
-
Size
50KB
-
MD5
b0dab3e62f7530a3ec6d904073e31b92
-
SHA1
56a7d14649c85cffa2d4db39b3a5bc8fcddf895d
-
SHA256
a3d0a7a00f34508b2a48aa614f86e87c09d908bcbb293f70f64e02c19e04bbbd
-
SHA512
a54d9bb9e29a71f6eafc05274bcba92facf840feb69cd08093e8d62cadf13b52da73fd7cbb4afafad967468d5d20fc506b67e6463086e2525c40b2210903a5c7
-
SSDEEP
768:Z1SJliaz3qD0nFXl2XhBzTVQBWq7kMFmB/g3OVTjwUQyKWmVnToIf11345:Z1SJQa2K2XhBzK1VnToIf
Malware Config
Signatures
Files
-
a3d0a7a00f34508b2a48aa614f86e87c09d908bcbb293f70f64e02c19e04bbbd.exe windows x86
ccd05fce4c2255445e20c15d67b8b7eb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
ExitWindowsEx
wsprintfA
advapi32
CloseServiceHandle
OpenServiceA
OpenSCManagerA
AdjustTokenPrivileges
ChangeServiceConfigA
LookupPrivilegeValueA
OpenProcessToken
kernel32
lstrcmpiA
GetModuleHandleA
lstrcatA
CloseHandle
CopyFileExA
CreateFileA
ExitProcess
GetCurrentProcess
GetFileSize
GetFileTime
WriteFile
GetProcAddress
GlobalAlloc
GlobalFree
LoadLibraryA
MoveFileExA
MultiByteToWideChar
ReadFile
RtlMoveMemory
RtlZeroMemory
SetFileTime
version
GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 1006B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ