Static task
static1
Behavioral task
behavioral1
Sample
50ca8f43bf3e76e2ff713f12e7f841e248e44d23127de64a2b76065091ccb17f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
50ca8f43bf3e76e2ff713f12e7f841e248e44d23127de64a2b76065091ccb17f.exe
Resource
win10v2004-20220812-en
General
-
Target
50ca8f43bf3e76e2ff713f12e7f841e248e44d23127de64a2b76065091ccb17f
-
Size
42KB
-
MD5
5a89913c1a37d62efe69baee08b0a050
-
SHA1
1ba88df1375080595c411dda55095f99a15d59e1
-
SHA256
50ca8f43bf3e76e2ff713f12e7f841e248e44d23127de64a2b76065091ccb17f
-
SHA512
10b0d7add6052933c99c9a4b93f5e70dd8b70e1dff0698ffc6ac594c42a9f5fefa5d0cc266282c680d143a73f2447973f4a1ff5a62d1eba8e9c39a481835dff0
-
SSDEEP
768:IZ5PcvxL0Vt8HDoyaH0N7JVDAc/sGnoa:IDUJIVt4oyaUN7J2fGnoa
Malware Config
Signatures
Files
-
50ca8f43bf3e76e2ff713f12e7f841e248e44d23127de64a2b76065091ccb17f.exe windows x86
cd5949233d93b06cebca795a1b436223
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SwapMouseButton
imm32
ImmCreateContext
msvbvm60
ord183
ord589
MethCallEngine
ord668
ord631
ord632
ord526
ord633
EVENT_SINK_AddRef
ord527
ord528
DllFunctionCall
ord563
ord672
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord608
ord717
ProcCallEngine
ord644
ord647
ord570
ord681
ord100
ord613
ord432
ord619
Sections
.text Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ