Static task
static1
Behavioral task
behavioral1
Sample
7334c514d64ec82c6f2e34555449c057c9c272757943c4d848ce6447d44c8fae.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
7334c514d64ec82c6f2e34555449c057c9c272757943c4d848ce6447d44c8fae.exe
Resource
win10v2004-20221111-en
General
-
Target
7334c514d64ec82c6f2e34555449c057c9c272757943c4d848ce6447d44c8fae
-
Size
322KB
-
MD5
1976fc5a4ffaaaeca0564032154c8684
-
SHA1
846b3466fbcc37baecabe568fb05be8921e869ce
-
SHA256
7334c514d64ec82c6f2e34555449c057c9c272757943c4d848ce6447d44c8fae
-
SHA512
1dfe27bad8d2d3579009f80360018a48f0ee08d60a6b64b3982bc717f1e56f0f52cb9b48a346229a91c58d5e0754766b9ec5d6c03e112941a6bd070a8990cb9f
-
SSDEEP
6144:BMDxe4nb2sHMFMSgUiv6NTpe1OfsIL+kn32DYKhoiONv4pk:BkxZKsHMFMvUPeOVyk3G47N7
Malware Config
Signatures
Files
-
7334c514d64ec82c6f2e34555449c057c9c272757943c4d848ce6447d44c8fae.exe windows x86
23ffe496b0184617c11e48bc8af2706a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
NtAllocateVirtualMemory
NtAdjustPrivilegesToken
_itoa
rpcrt4
NdrDllCanUnloadNow
CStdStubBuffer_Disconnect
NdrDllGetClassObject
CStdStubBuffer_Invoke
NdrOleAllocate
CStdStubBuffer_AddRef
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_DebugServerQueryInterface
IUnknown_Release_Proxy
CStdStubBuffer_Connect
IUnknown_AddRef_Proxy
CStdStubBuffer_QueryInterface
IUnknown_QueryInterface_Proxy
NdrOleFree
CStdStubBuffer_CountRefs
CStdStubBuffer_DebugServerRelease
NdrCStdStubBuffer_Release
Sections
.text Size: 278KB - Virtual size: 277KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 7.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE