Static task
static1
Behavioral task
behavioral1
Sample
0da56e9fbd32f117db46511cae55f63cc607f781276b3516e143365174e74118.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
0da56e9fbd32f117db46511cae55f63cc607f781276b3516e143365174e74118.exe
Resource
win10v2004-20220901-en
General
-
Target
0da56e9fbd32f117db46511cae55f63cc607f781276b3516e143365174e74118
-
Size
25KB
-
MD5
725af7c1450fba089e277eaf8874b670
-
SHA1
2423c85dbeec06daee158616caa9849766c480ec
-
SHA256
0da56e9fbd32f117db46511cae55f63cc607f781276b3516e143365174e74118
-
SHA512
298d67c7140cde6971fa40baf47e84c0e4f1cd87e55e2d2f634887bcf2271ab79cfd14376bce57550ab09921d7d02894777449452621bd16a1504daf00ef7d76
-
SSDEEP
384:Uj8eNZU3fMKrb2MdlYiagYQtLoz6JB/E65p24FWSDdYxy9lShTIVc1:Uj8ezqrXlqgYk+65p2O5YxyehTI8
Malware Config
Signatures
Files
-
0da56e9fbd32f117db46511cae55f63cc607f781276b3516e143365174e74118.exe windows x86
cb2239d229da90a791484db667ace8c7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
imm32
ImmGetContext
winspool.drv
AbortPrinter
winmm
midiStreamStop
msvbvm60
ord183
ord691
ord697
ord703
ord705
ord631
ord632
ord526
EVENT_SINK_AddRef
ord527
DllFunctionCall
ord563
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord717
ProcCallEngine
ord537
ord644
ord647
ord570
ord681
ord100
ord432
Sections
.text Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ