Static task
static1
Behavioral task
behavioral1
Sample
CreateAllDataService.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
CreateAllDataService.exe
Resource
win10v2004-20230220-en
General
-
Target
CreateAllDataService.exe
-
Size
14KB
-
MD5
1de45b777d34b7ec65bcffc78c0a3a79
-
SHA1
6f3a1bbc3f09280a38069cb54d2508f9df61bc2b
-
SHA256
933d18989248c6f9d3fe512c0b411161bd4ec5ac8c5d478e520a51a045ec1afc
-
SHA512
631597c1446e148c479f1750ee910f412a4d89146a8d7cea6a17edca4b50dea87dee8252879f8d0791d7829995ef4dd561c64f7c44ff7da4a2ebd645dd6b4ce0
-
SSDEEP
192:o4AeQzVZaL3jKLyAbIuJrTVmtx9gVVg1fZ5kd+Xn7+5JlH2YojWVQ:oZeQz3SQyAb7JrTixmGJWZH2zjWV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource CreateAllDataService.exe
Files
-
CreateAllDataService.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ