Static task
static1
Behavioral task
behavioral1
Sample
49f86ba62bb39f2ddef4bb7625321b739850c734987982b35a90e7f5d090c092.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
49f86ba62bb39f2ddef4bb7625321b739850c734987982b35a90e7f5d090c092.exe
Resource
win10v2004-20220812-en
General
-
Target
49f86ba62bb39f2ddef4bb7625321b739850c734987982b35a90e7f5d090c092
-
Size
132KB
-
MD5
66a6d53accec63e55719a42871a047e0
-
SHA1
b7bb5b4989757d49630a6af0aa4d60c3ab70c84a
-
SHA256
49f86ba62bb39f2ddef4bb7625321b739850c734987982b35a90e7f5d090c092
-
SHA512
3216a33492bacfdc16577dbbf79e547f47d0327fd0c1eb59781113cdc6f44b8bcf0e7db05d03b576a5cc9586ebeab315ce4266e08c1d0da9cea21c09db52eb93
-
SSDEEP
3072:PRx6TQa091L7kz8GNGe2Ko2XsL7EcwZsFQz:PoFs7M8Q/2KrXsLRw
Malware Config
Signatures
Files
-
49f86ba62bb39f2ddef4bb7625321b739850c734987982b35a90e7f5d090c092.exe windows x86
75846f499c3c54432ae752e32edd7368
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
imm32
ImmDestroyContext
lz32
LZClose
msvbvm60
ord691
ord515
ord553
DllFunctionCall
__vbaExceptHandler
ProcCallEngine
ord644
ord100
ord430
Sections
.text Size: 104KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 316B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1008B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ