Static task
static1
Behavioral task
behavioral1
Sample
2bb4c800c548e51d151693317f4b2ac8795eb6cd4d2cca5f575fd8c24c0d60f7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2bb4c800c548e51d151693317f4b2ac8795eb6cd4d2cca5f575fd8c24c0d60f7.exe
Resource
win10v2004-20220812-en
General
-
Target
2bb4c800c548e51d151693317f4b2ac8795eb6cd4d2cca5f575fd8c24c0d60f7
-
Size
497KB
-
MD5
66a41cd170f1bdaad48b8fc179a940f0
-
SHA1
b4f55ebb376d34927034d529a40b6365d3c7cf1f
-
SHA256
2bb4c800c548e51d151693317f4b2ac8795eb6cd4d2cca5f575fd8c24c0d60f7
-
SHA512
f97378959af381eca8182a752b29ebd8977d30e1860dcea28c0bd389208390e91d08c7eccf415723e1a62793feee9bd9e799235a9a201e4a742b3f1c5b87db9c
-
SSDEEP
6144:IP1YW7JZLRy736PjQkTPyNX62hSqiIvisCKrotpb2wfSzZQgwqJD+0ZsuMQEww8m:2tZtyGPKSqTqYuLKzZQgrwYs1rxX
Malware Config
Signatures
Files
-
2bb4c800c548e51d151693317f4b2ac8795eb6cd4d2cca5f575fd8c24c0d60f7.exe windows x86
4ade579d10dfda7380b6eb0789ebbbe5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalFindAtomW
GetSystemDefaultLangID
GetStartupInfoA
GetSystemDefaultLCID
GetOEMCP
LoadLibraryA
rpcrt4
CStdStubBuffer_CountRefs
IUnknown_QueryInterface_Proxy
CStdStubBuffer_Invoke
NdrDllCanUnloadNow
CStdStubBuffer_QueryInterface
CStdStubBuffer_IsIIDSupported
NdrOleAllocate
NdrDllUnregisterProxy
NdrDllRegisterProxy
CStdStubBuffer_AddRef
CStdStubBuffer_Connect
NdrDllGetClassObject
NdrCStdStubBuffer_Release
IUnknown_Release_Proxy
NdrOleFree
IUnknown_AddRef_Proxy
CStdStubBuffer_Disconnect
CStdStubBuffer_DebugServerRelease
msvcrt
malloc
_adjust_fdiv
free
_initterm
Sections
.text Size: 271KB - Virtual size: 270KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.zota Size: 1024B - Virtual size: 866B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 115KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 58KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 49KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 256B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ