Static task
static1
Behavioral task
behavioral1
Sample
fb364837a3074eabdc983cef611645640fdea078bacdace83379aca0ddb10705.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fb364837a3074eabdc983cef611645640fdea078bacdace83379aca0ddb10705.exe
Resource
win10v2004-20220812-en
General
-
Target
fb364837a3074eabdc983cef611645640fdea078bacdace83379aca0ddb10705
-
Size
32KB
-
MD5
6e3490c1047c0a413e722bf0b3a68370
-
SHA1
5818f70eeb1e7f0ef6fb1617e0d2361fc9aa4734
-
SHA256
fb364837a3074eabdc983cef611645640fdea078bacdace83379aca0ddb10705
-
SHA512
15cd4fa0aeb36505d176698ab1f156a0bced74687c2e6465a9f9b271d31df2a7de4639e7e9c8bd6b3a3a1afd16c48ed6dbc55e9e100785625560e5a39e98ee91
-
SSDEEP
384:0OduZNHUX5fKPt6ZVUESCssOJvy6JB7Ep5qq+FnfjkTYYyqdCni7dN+1:0OuZJrPuUZCspqp5XojEYYyziZNA
Malware Config
Signatures
Files
-
fb364837a3074eabdc983cef611645640fdea078bacdace83379aca0ddb10705.exe windows x86
cfcb89fefe618fdfd76a5dcb5548c1a4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
imm32
ImmGetContext
winspool.drv
AbortPrinter
winmm
midiStreamStop
msvbvm60
ord183
ord697
ord552
ord556
ord630
ord631
ord632
ord526
EVENT_SINK_AddRef
ord527
DllFunctionCall
ord563
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord717
ProcCallEngine
ord537
ord644
ord647
ord570
ord681
ord100
ord432
Sections
.text Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ