Static task
static1
Behavioral task
behavioral1
Sample
b496894136c22beb474292d70971409fa189831683f429e3a36bece2fde827e8.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b496894136c22beb474292d70971409fa189831683f429e3a36bece2fde827e8.exe
Resource
win10v2004-20220812-en
General
-
Target
b496894136c22beb474292d70971409fa189831683f429e3a36bece2fde827e8
-
Size
54KB
-
MD5
68e4ed7844d5bc58e016d654b0c67723
-
SHA1
6a4ab7dd5f155fdfe0c6110191a923977b4308a0
-
SHA256
b496894136c22beb474292d70971409fa189831683f429e3a36bece2fde827e8
-
SHA512
4151f5ce5e11349e37100f5bb6345490d7b3c13d940e16af5738573f6ba0f7cd935301a5d757be1d24821720259f874bb68b917c271dc6b9ca932327e34582f5
-
SSDEEP
768:7TFaW2bcQnyJEXDlQlyfiAVK9nNpbZkBCeZ0x7i79uTQrONOrAG2FxKB3UMaKVCm:XFaWAdt5QwacKNNjeZrOcdgxqkXqd
Malware Config
Signatures
Files
-
b496894136c22beb474292d70971409fa189831683f429e3a36bece2fde827e8.exe windows x86
4ebcc6330310123f7e701b53a0b0f41b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
BindMoniker
CLIPFORMAT_UserFree
PropVariantChangeType
CoCopyProxy
oleaut32
VariantCopyInd
SafeArraySetRecordInfo
CreateStdDispatch
RegisterActiveObject
VarNumFromParseNum
kernel32
SetConsoleCP
FindResourceA
EnumResourceNamesA
VirtualAlloc
GetStartupInfoA
GetOEMCP
ExitProcess
LockResource
GetModuleHandleA
EnumResourceTypesA
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 592B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ