Static task
static1
Behavioral task
behavioral1
Sample
8c2c6ed9b07609e275b67a69d66234ff68908d60e301e80b4bbe388e10d43f64.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8c2c6ed9b07609e275b67a69d66234ff68908d60e301e80b4bbe388e10d43f64.exe
Resource
win10v2004-20220901-en
General
-
Target
8c2c6ed9b07609e275b67a69d66234ff68908d60e301e80b4bbe388e10d43f64
-
Size
128KB
-
MD5
66510870ce18c72f289969779d20b221
-
SHA1
647bd4a3251238720baec7be4a9d360cbbbc2d88
-
SHA256
8c2c6ed9b07609e275b67a69d66234ff68908d60e301e80b4bbe388e10d43f64
-
SHA512
aee052a54a427871ae8a015a172973067d3435685726444818ffc9e8773660e11d04bd0193fcb82c7d68a95602e6092c45168a2edb13be285811316c46ae7e02
-
SSDEEP
3072:WBH7NQCFCVYyzQoME4R+QE2iixNFRvUK:2bKCF2Qo74TtD3wK
Malware Config
Signatures
Files
-
8c2c6ed9b07609e275b67a69d66234ff68908d60e301e80b4bbe388e10d43f64.exe windows x86
4f82b42c6060ed5c2b09621730b82fb5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RevertToSelf
winmm
midiStreamPause
mpr
WNetConnectionDialog
msvbvm60
MethCallEngine
Zombie_QueryInterface
EVENT_SINK_AddRef
ord673
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord644
ord100
ord652
ord545
Sections
.text Size: 92KB - Virtual size: 89KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ