Static task
static1
Behavioral task
behavioral1
Sample
76dda99e544f61a5c9ea678756b09f6e0aad6e4c55493f0a24713deff46717ea.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
76dda99e544f61a5c9ea678756b09f6e0aad6e4c55493f0a24713deff46717ea.exe
Resource
win10v2004-20220812-en
General
-
Target
76dda99e544f61a5c9ea678756b09f6e0aad6e4c55493f0a24713deff46717ea
-
Size
493KB
-
MD5
83ae2f714643d1a8404a6bea1c9634f0
-
SHA1
b94fd3eda22f5a054ac0f41ed36c3ae4356b72aa
-
SHA256
76dda99e544f61a5c9ea678756b09f6e0aad6e4c55493f0a24713deff46717ea
-
SHA512
a07a971c9fe79db9558a3319260694165b41467988d8cde0f2ba3ed0ff22214292e6e124bf71d7cd2f15293be97c35cfb944bca1176d24a19ecdb3b325c74903
-
SSDEEP
12288:Sjp1+j8z8wwXvFCG6AGz9rAK5mCZ3AdwnpLMW:SsaM6BWv/dQ5
Malware Config
Signatures
Files
-
76dda99e544f61a5c9ea678756b09f6e0aad6e4c55493f0a24713deff46717ea.exe windows x86
8c9eb27e4b1a3c7e1fb7c4e92a3708d9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
rpcrt4
NdrOleAllocate
CStdStubBuffer_QueryInterface
IUnknown_QueryInterface_Proxy
CStdStubBuffer_Invoke
NdrDllRegisterProxy
IUnknown_Release_Proxy
NdrDllCanUnloadNow
NdrOleFree
CStdStubBuffer_DebugServerRelease
CStdStubBuffer_Connect
NdrDllGetClassObject
NdrCStdStubBuffer_Release
NdrDllUnregisterProxy
CStdStubBuffer_CountRefs
CStdStubBuffer_AddRef
IUnknown_AddRef_Proxy
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_Disconnect
kernel32
GlobalFindAtomW
GetSystemDefaultLangID
GetStartupInfoA
GetSystemDefaultLCID
LoadLibraryA
Sections
.text Size: 267KB - Virtual size: 266KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.karu Size: 58KB - Virtual size: 58KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 57KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 58KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 49KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 216B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ