Static task
static1
Behavioral task
behavioral1
Sample
sc.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
sc.exe
Resource
win10v2004-20221111-en
General
-
Target
sc.exe
-
Size
3.9MB
-
MD5
d4f936ad894820c5f3b538d68856c0d7
-
SHA1
88582a618d0a8a35bb448c1a49d5ca5ada5663dd
-
SHA256
fe788e2184591197a88da60b212483ac7efcd7afae644819944e8431e2a11f7c
-
SHA512
143d4ee478fcf5718ed841e3bbf0e0e32992c7247dc3d76c3c57828986e46b6296bc9fc2e4e34650166429654e651f6ccf4c74c3a7f8c2660b87d90ce6a5f3d7
-
SSDEEP
98304:jIVBauHBv3pYoYtDaFt+8jcsRaLXQOcvHZzbj:jIV/d3ptYtCDjcs4mHFbj
Malware Config
Signatures
Files
-
sc.exe.exe windows x64
0c06632866a4cccdf8adc4a0a90bdc3f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
GetModuleHandleA
LoadLibraryA
ExitProcess
user32
MessageBoxA
ole32
CoInitialize
Sections
.text Size: 3.9MB - Virtual size: 3.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 348B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 426B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE