Static task
static1
Behavioral task
behavioral1
Sample
system_services.exe
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
system_services.exe
Resource
win10v2004-20230703-en
General
-
Target
system_services.exe
-
Size
419KB
-
MD5
e58eb8021b9562b99dc406f07e1ade57
-
SHA1
0d347348d0857c67deb7ae3006d64f6af9b58558
-
SHA256
09de5619ded6fdb4b2729e49dfa6aa31c8339f221bd09ed9f861c3a73fd89ee9
-
SHA512
d842834f6f13ca3c8b00a36edecc38ed296417fa7a0870308689bc8a04618de9ea828746cc345ae87e33da97ed1819231689aaa93c6ac77a10bbf144456eab9c
-
SSDEEP
6144:zjcUtnU9xvMbFoQczpFt7fMYkvTxw7TeaPkHEM3MuGsu82vp:z4UtnU9x8FohV7fEKHeasHeuZu82R
Malware Config
Signatures
Files
-
system_services.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
11:29:67:83:c1:d1:b9:a6:46:e7:76:d7:60:af:84:5eCertificate
IssuerCN=DESKTOP-308E351\\Iksoft OriginalNot Before19/06/2023, 18:26Not After19/06/2024, 00:26SubjectCN=DESKTOP-308E351\\Iksoft Original08:ba:50:1f:bf:dd:34:2c:16:55:95:79:86:2a:1c:71:a8:c4:ed:28Signer
Actual PE Digest08:ba:50:1f:bf:dd:34:2c:16:55:95:79:86:2a:1c:71:a8:c4:ed:28Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 411KB - Virtual size: 411KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ