Static task
static1
Behavioral task
behavioral1
Sample
maintenanceservice.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
maintenanceservice.exe
Resource
win10v2004-20231023-en
General
-
Target
maintenanceservice.exe
-
Size
7KB
-
MD5
420ed99bb43bf50ec0079b16dc0b91b6
-
SHA1
ef7fef485350695082c7145bfab9761df7f24976
-
SHA256
cf50119b5641cf19cb990c3834ab8dcb77f04242f67538a3d26b8a4297e2cc89
-
SHA512
7a62dd2f3bf8215577a3af56d889638e626567c0f9815d8cf95f4c316b82ae87f7d47072f708e72fec4582ed374ab25bf9dd19e90bb78399d9266a361f05cbc3
-
SSDEEP
24:eFGStrJ9u0/6fvHnZd4BQAVKHacgKT7NEEisYy7/fbuqiksvcvFpmB:is0aj4BQvHRg2JE3sFLfqqilk6B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource maintenanceservice.exe
Files
-
maintenanceservice.exe.exe windows:4 windows x64
b4c6fff030479aa3b12625be67bf4914
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
VirtualAlloc
ExitProcess
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 132B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.qcmr Size: 1024B - Virtual size: 824B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE