Static task
static1
Behavioral task
behavioral1
Sample
bf0eb54cd555130c67f6db85ecbdd9070b39440f4942f943692e8744bd15f70b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bf0eb54cd555130c67f6db85ecbdd9070b39440f4942f943692e8744bd15f70b.exe
Resource
win10v2004-20220901-en
General
-
Target
bf0eb54cd555130c67f6db85ecbdd9070b39440f4942f943692e8744bd15f70b
-
Size
23KB
-
MD5
5bd4d2597f1e088aa18c2d880f7d0fb0
-
SHA1
e436409a65ec1a8d32f5f606a17e3569502db28f
-
SHA256
bf0eb54cd555130c67f6db85ecbdd9070b39440f4942f943692e8744bd15f70b
-
SHA512
e27bdb4edd32a6e1ede98c6d76d0ca8feb0d02a9bc3806a0bd1e22d9da55165448713bbf4ea3d4acadbc829441e1040146407a9c841afb311d1724f20a5d2c22
-
SSDEEP
384:aQQJWUCqxwC0khzTmrJBSEg5LLjAvyV1SY9vZKIif5mCrn1:L5UCqR0khCdg5LYvqSY9vZUftr1
Malware Config
Signatures
Files
-
bf0eb54cd555130c67f6db85ecbdd9070b39440f4942f943692e8744bd15f70b.exe windows x86
db1938f0685b18d7a3fe3769b543248b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
imm32
ImmGetContext
winspool.drv
AbortPrinter
winmm
midiStreamStop
msvbvm60
ord183
ord697
ord513
ord631
ord632
ord526
ord528
DllFunctionCall
ord563
ord601
__vbaExceptHandler
ord712
ord717
ProcCallEngine
ord537
ord644
ord647
ord570
ord681
ord100
ord432
ord547
Sections
.text Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ