Static task
static1
Behavioral task
behavioral1
Sample
f3f2bf735aaf699f0cdb269684db859b8951462fc72f0484ca114c2767da37fd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f3f2bf735aaf699f0cdb269684db859b8951462fc72f0484ca114c2767da37fd.exe
Resource
win10v2004-20220812-en
General
-
Target
f3f2bf735aaf699f0cdb269684db859b8951462fc72f0484ca114c2767da37fd
-
Size
495KB
-
MD5
645063895eaefc50b7c6e21ebc519f60
-
SHA1
98c7961f9dbe19c4a7215e81c53794378c0d14c4
-
SHA256
f3f2bf735aaf699f0cdb269684db859b8951462fc72f0484ca114c2767da37fd
-
SHA512
cb3328f8c0739e4c0dba75349e65ec50f2ff8fc592eea8f07fca63f329fda479cb82867b3ac0ac1153acc92d3a27860903b733540a666c771a77169c9307fe21
-
SSDEEP
12288:lNgizBJxQTkiclvEwB5jzjw+dKiqpQsne+W6g:rtJticlRB5rw3Bisng
Malware Config
Signatures
Files
-
f3f2bf735aaf699f0cdb269684db859b8951462fc72f0484ca114c2767da37fd.exe windows x86
3819678c936aef8f351c81f56390968d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalFindAtomW
GetStartupInfoA
GetSystemDefaultLCID
LoadLibraryA
GetSystemDefaultLangID
rpcrt4
CStdStubBuffer_Disconnect
CStdStubBuffer_DebugServerRelease
NdrDllCanUnloadNow
CStdStubBuffer_QueryInterface
NdrDllRegisterProxy
NdrOleAllocate
NdrCStdStubBuffer_Release
IUnknown_QueryInterface_Proxy
NdrDllGetClassObject
CStdStubBuffer_Connect
CStdStubBuffer_IsIIDSupported
IUnknown_Release_Proxy
NdrDllUnregisterProxy
IUnknown_AddRef_Proxy
NdrOleFree
CStdStubBuffer_Invoke
CStdStubBuffer_AddRef
CStdStubBuffer_CountRefs
Sections
.text Size: 269KB - Virtual size: 269KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.karu Size: 58KB - Virtual size: 58KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 57KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 58KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 49KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 316B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ