Static task
static1
Behavioral task
behavioral1
Sample
PakingVideoWindowsService.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
PakingVideoWindowsService.exe
Resource
win10v2004-20230915-en
General
-
Target
PakingVideoWindowsService.exe
-
Size
47KB
-
MD5
350b6f88822497be2c0c5e77ad43b3bd
-
SHA1
d5a7fcce307822fe082d91c337681a9622b2c8df
-
SHA256
b3aeb8a29631204eeb49e24c4009f6626744e59abc3ad19ee80e210fefdf55ff
-
SHA512
2e55be6151ba4b43f3f80b0fec113db1be9ad39ef15cf7cbf39dd33e970b47ff258487970087a33feb47b04022967ddfa7f5931671aa95fb7b2260b0d707a9de
-
SSDEEP
768:tfhT9JIXS6JuQJiYZqOtox0LfjMf2mSG0r/spk+9vtQJjGV:HmpZqOtq0LfjMf2mXuU2Qcjy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource PakingVideoWindowsService.exe
Files
-
PakingVideoWindowsService.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ