Static task
static1
Behavioral task
behavioral1
Sample
b7f99f427e98d03f67339a67dbf115c36a8ce70357e0b97a76b7ba749815221c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b7f99f427e98d03f67339a67dbf115c36a8ce70357e0b97a76b7ba749815221c.exe
Resource
win10v2004-20220812-en
General
-
Target
b7f99f427e98d03f67339a67dbf115c36a8ce70357e0b97a76b7ba749815221c
-
Size
8KB
-
MD5
151e6eb6d72e44555aa7ddd64f134aa9
-
SHA1
808d35e1bf453e49ab76ded7b8011ed60efe2a19
-
SHA256
b7f99f427e98d03f67339a67dbf115c36a8ce70357e0b97a76b7ba749815221c
-
SHA512
78783a63839d162e89417ff3344563900e304c25b3c74029a01777e6d45fc842ab550e8f3c237e9c7a93bd1231e731524f085912111e1bfdf05693d2db060d69
-
SSDEEP
96:tRPkd3Gf5Aesj1HiWD4AnBq3JJVQa7NObQ0wdZSbrQDgFgpKXGenkiTiaxjIyMSz:t5nPGliWyJJV4Q1S/qJaxcyT
Malware Config
Signatures
Files
-
b7f99f427e98d03f67339a67dbf115c36a8ce70357e0b97a76b7ba749815221c.exe windows x86
bc2859e2e3a263ee3e493b0520f28d16
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameA
GetCommandLineA
SetFileAttributesA
DeleteFileA
Sleep
CreateProcessA
LoadLibraryA
GetProcAddress
FreeLibrary
GetWindowsDirectoryA
SetCurrentDirectoryA
lstrcatA
GetSystemTime
HeapFree
ReadFile
HeapAlloc
GetProcessHeap
CloseHandle
GetFileSize
CreateFileA
WriteFile
GetLocalTime
lstrlenA
SetFilePointer
ExitProcess
GetModuleHandleA
GetStartupInfoA
lstrcmpiA
user32
wsprintfA
advapi32
RegisterServiceCtrlHandlerA
StartServiceCtrlDispatcherA
OpenSCManagerA
OpenServiceA
CreateServiceA
CloseServiceHandle
ChangeServiceConfigA
ChangeServiceConfig2A
StartServiceA
SetServiceStatus
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE