Static task
static1
Behavioral task
behavioral1
Sample
b976a55ce4bf1d006b0af551f4a42bf35641c1941e2527c77b9eb319c1e24d75.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b976a55ce4bf1d006b0af551f4a42bf35641c1941e2527c77b9eb319c1e24d75.exe
Resource
win10v2004-20220812-en
General
-
Target
b976a55ce4bf1d006b0af551f4a42bf35641c1941e2527c77b9eb319c1e24d75
-
Size
496KB
-
MD5
5e5b6a4169231b744642d951fc4cf070
-
SHA1
eb31f3f7a3fc1da41fe8cdadf90263da3e9b650c
-
SHA256
b976a55ce4bf1d006b0af551f4a42bf35641c1941e2527c77b9eb319c1e24d75
-
SHA512
c2882886027ee496eebd9472c7eead20d0da6df2478b341a8a5a7a0bbeeafee7abf2b942342a9c14402548354ff95978a6a22f40e46c87beae045b33fe09aa29
-
SSDEEP
6144:DU9ECKCNQmLCNMbFc/EMr+mLbU+34q9JYhn5hBFdDzWFptOtES/rH6DnYPLyqrsv:D1MZC8e/HFoq9JYZtDibt9Can2s0U
Malware Config
Signatures
Files
-
b976a55ce4bf1d006b0af551f4a42bf35641c1941e2527c77b9eb319c1e24d75.exe windows x86
78ad7b3b9f92506e06d5f988cf873e5c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
malloc
_initterm
_adjust_fdiv
free
rpcrt4
CStdStubBuffer_AddRef
IUnknown_AddRef_Proxy
NdrDllRegisterProxy
IUnknown_Release_Proxy
CStdStubBuffer_Invoke
CStdStubBuffer_QueryInterface
IUnknown_QueryInterface_Proxy
NdrDllGetClassObject
NdrOleFree
CStdStubBuffer_Disconnect
CStdStubBuffer_DebugServerRelease
NdrOleAllocate
NdrDllCanUnloadNow
CStdStubBuffer_CountRefs
CStdStubBuffer_IsIIDSupported
NdrDllUnregisterProxy
NdrCStdStubBuffer_Release
CStdStubBuffer_Connect
kernel32
GetSystemDefaultLCID
GlobalFindAtomW
GetOEMCP
GetSystemDefaultLangID
GetStartupInfoA
LoadLibraryA
Sections
.text Size: 270KB - Virtual size: 270KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.zota Size: 1024B - Virtual size: 866B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 115KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 58KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 49KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 348B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ