Static task
static1
Behavioral task
behavioral1
Sample
3a69f7e294d384d68d40e3c3f344a8e97a60ded7d76add665f5160088e5fe5c2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3a69f7e294d384d68d40e3c3f344a8e97a60ded7d76add665f5160088e5fe5c2.exe
Resource
win10v2004-20220812-en
General
-
Target
3a69f7e294d384d68d40e3c3f344a8e97a60ded7d76add665f5160088e5fe5c2
-
Size
497KB
-
MD5
76d4a58a8961e229b1d7b6565231c9f0
-
SHA1
e85c70a0f11290696a0d3dbad76fd117365cc0eb
-
SHA256
3a69f7e294d384d68d40e3c3f344a8e97a60ded7d76add665f5160088e5fe5c2
-
SHA512
13c12fbdf5f45e30921f66bc1c77d0cd3d5d283a7432957ec2cee3feecbc57dce91b379a6061108bbebb5f3ccb05117d0038289bdf6154d24fcf0b23a5e3688f
-
SSDEEP
6144:IP1YW7JZLRy736PjQkTPyNX62hSqiIvisCKrotpb2wfSzZQgwqJD+0ZsuMQEww8Y:2tZtyGPKSqTqYuLKzZQgrwYs1rxee
Malware Config
Signatures
Files
-
3a69f7e294d384d68d40e3c3f344a8e97a60ded7d76add665f5160088e5fe5c2.exe windows x86
4ade579d10dfda7380b6eb0789ebbbe5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalFindAtomW
GetSystemDefaultLangID
GetStartupInfoA
GetSystemDefaultLCID
GetOEMCP
LoadLibraryA
rpcrt4
CStdStubBuffer_CountRefs
IUnknown_QueryInterface_Proxy
CStdStubBuffer_Invoke
NdrDllCanUnloadNow
CStdStubBuffer_QueryInterface
CStdStubBuffer_IsIIDSupported
NdrOleAllocate
NdrDllUnregisterProxy
NdrDllRegisterProxy
CStdStubBuffer_AddRef
CStdStubBuffer_Connect
NdrDllGetClassObject
NdrCStdStubBuffer_Release
IUnknown_Release_Proxy
NdrOleFree
IUnknown_AddRef_Proxy
CStdStubBuffer_Disconnect
CStdStubBuffer_DebugServerRelease
msvcrt
malloc
_adjust_fdiv
free
_initterm
Sections
.text Size: 271KB - Virtual size: 270KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.zota Size: 1024B - Virtual size: 866B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 115KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 58KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 49KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 256B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ