Static task
static1
Behavioral task
behavioral1
Sample
c85e038fd8aa9e1e1825d11ac757b5fb805d4c6633d3124df2b54aec749372a0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c85e038fd8aa9e1e1825d11ac757b5fb805d4c6633d3124df2b54aec749372a0.exe
Resource
win10v2004-20220812-en
General
-
Target
c85e038fd8aa9e1e1825d11ac757b5fb805d4c6633d3124df2b54aec749372a0
-
Size
87KB
-
MD5
66af54f653499fe62c58c3f3820d0d50
-
SHA1
672794fd1eb1608b88d6f856f2ae9bff5a6a17d2
-
SHA256
c85e038fd8aa9e1e1825d11ac757b5fb805d4c6633d3124df2b54aec749372a0
-
SHA512
5e3d17fbd9ca47b3edfca8ce3829251a05a8804dd8416501b27e1336c33621c3bce5fe9a7b6ced40c8f7fb73b146681996b2b47e67238ff2a1b8e15563b13f6c
-
SSDEEP
1536:Wth3lTGHyQCWPT3t2TYYeLiktzMt2kHMPQI:YF4PzlYO02nT
Malware Config
Signatures
Files
-
c85e038fd8aa9e1e1825d11ac757b5fb805d4c6633d3124df2b54aec749372a0.exe windows x86
1e0c9df3a76d2f25b2e023c9a3dc186d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
lz32
LZInit
gdi32
BitBlt
advapi32
CloseEventLog
msvbvm60
ord183
ord583
ord588
ord697
ord631
ord632
ord526
EVENT_SINK_AddRef
ord527
ord528
DllFunctionCall
ord563
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord717
ProcCallEngine
ord644
ord647
ord570
ord681
ord100
ord432
ord619
Sections
.text Size: 82KB - Virtual size: 81KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ