Static task
static1
Behavioral task
behavioral1
Sample
352a0398ae51cd0a4ed2a2364accd3882415e1ca6593958e07f7aba8c8377217.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
352a0398ae51cd0a4ed2a2364accd3882415e1ca6593958e07f7aba8c8377217.exe
Resource
win10v2004-20220812-en
General
-
Target
352a0398ae51cd0a4ed2a2364accd3882415e1ca6593958e07f7aba8c8377217
-
Size
40KB
-
MD5
676c083c7d4108ed29cd39343b6f27f0
-
SHA1
1f7227b9d04f49a797be10d56031fba1a5a83a9c
-
SHA256
352a0398ae51cd0a4ed2a2364accd3882415e1ca6593958e07f7aba8c8377217
-
SHA512
0896efadb1786e897564b44addffce1c26115d820a25c44546f6b985aa898fefc883447d84985c0cb14970c3962f449e0825e910cb32d9d32b03433ebe382fa5
-
SSDEEP
384:FrKZBJ06LtRkzekfpgZpvBXibWZlzSZsHYRxySz15IL6ps2QdhA4I7m3jAnzh:1eBJ06JAfgBZlIxySz15qA6AN
Malware Config
Signatures
Files
-
352a0398ae51cd0a4ed2a2364accd3882415e1ca6593958e07f7aba8c8377217.exe windows x86
2a12c2247553ce2d0971b60bb140efe3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
CombineRgn
msvbvm60
ord183
ord697
ord698
MethCallEngine
ord598
ord520
ord705
ord631
ord709
ord632
ord526
EVENT_SINK_AddRef
ord527
DllFunctionCall
ord563
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord644
ord647
ord570
ord681
ord100
ord616
ord432
Sections
.text Size: 32KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ