Static task
static1
Behavioral task
behavioral1
Sample
5debd19347347b542dc29a9a3d0665cc534ab25b5cce303f2453ab665e1f42d6.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
5debd19347347b542dc29a9a3d0665cc534ab25b5cce303f2453ab665e1f42d6.exe
Resource
win10v2004-20220901-en
General
-
Target
5debd19347347b542dc29a9a3d0665cc534ab25b5cce303f2453ab665e1f42d6
-
Size
43KB
-
MD5
5176f0b250da033d6be8059ac7f88430
-
SHA1
b00f1a6466f47f453e64b8d40ccbfc3bdf2b9fcb
-
SHA256
5debd19347347b542dc29a9a3d0665cc534ab25b5cce303f2453ab665e1f42d6
-
SHA512
3734174404efb7e17bc2f0f0627c635f809b051ec98bffb2df07a28acbb1e4736499d8d05d241e05d66f85deaeba930258fd1d2a18b4298bc827cac7f7302201
-
SSDEEP
384:1cvGStMLNfY2qePQYTtPKt6xl/r9XRmmEtrNxv33YmlfJlngBWGEN82GXmhNnBTe:1cAm2lQY5ytmlza3NqmPGNES2mSn9Fg
Malware Config
Signatures
Files
-
5debd19347347b542dc29a9a3d0665cc534ab25b5cce303f2453ab665e1f42d6.exe windows x86
65edf9f67b3278fa22e46b1018947b97
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winspool.drv
StartPagePrinter
kernel32
ContinueDebugEvent
winmm
midiStreamOpen
msvbvm60
ord183
ord695
ord698
ord594
ord631
ord632
ord526
EVENT_SINK_AddRef
ord527
ord528
DllFunctionCall
ord563
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord717
ProcCallEngine
ord644
ord539
ord647
ord570
ord681
ord100
ord432
ord540
Sections
.text Size: 39KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ