Static task
static1
Behavioral task
behavioral1
Sample
6e978fe19280cf7af89ed3483bda5b909f97d30e813b66895bb90a96388281a4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6e978fe19280cf7af89ed3483bda5b909f97d30e813b66895bb90a96388281a4.exe
Resource
win10v2004-20220812-en
General
-
Target
6e978fe19280cf7af89ed3483bda5b909f97d30e813b66895bb90a96388281a4
-
Size
156KB
-
MD5
50f4bc6b278408a2a88832e02910a946
-
SHA1
cf287b78442f82b980a404c8ffe0a4e7b29e18ed
-
SHA256
6e978fe19280cf7af89ed3483bda5b909f97d30e813b66895bb90a96388281a4
-
SHA512
6cc4250e8a9ac96c2ffe9b9969fd5958509184059c522adf3c58335e2fcd50cf4929f73d5c65e3c75438cf58a566b768d8edcf53ed4af0ec0a459c96bf00b5ec
-
SSDEEP
3072:my72UstQKyoYiWfWA1RPbdokL6FgtSZsG4vN6y4Rh/yTY2:mistQEFWfN3Pbd1LgZrX/y82
Malware Config
Signatures
Files
-
6e978fe19280cf7af89ed3483bda5b909f97d30e813b66895bb90a96388281a4.exe windows x86
fabafa450d09b6689b567ced7f8cf37f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
CancelDC
advapi32
RevertToSelf
lz32
LZClose
msvbvm60
ord513
ord560
DllFunctionCall
__vbaExceptHandler
ProcCallEngine
ord644
ord100
ord430
ord544
Sections
.text Size: 100KB - Virtual size: 99KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 372B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1008B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE