Static task
static1
Behavioral task
behavioral1
Sample
1944231940b3832a4ad56eaec34de58db5327fc50641011bd1402897efd19818.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
1944231940b3832a4ad56eaec34de58db5327fc50641011bd1402897efd19818.exe
Resource
win10v2004-20220812-en
General
-
Target
1944231940b3832a4ad56eaec34de58db5327fc50641011bd1402897efd19818
-
Size
100KB
-
MD5
17141845829787722f45cd4d40abc9f0
-
SHA1
350ebbceb21bd0855e0539c9c0644a4d7a903f0c
-
SHA256
1944231940b3832a4ad56eaec34de58db5327fc50641011bd1402897efd19818
-
SHA512
7d993571630f79ceca677fa54b196823ab727df0e652b1d8b44d6855cf90dac9bb39c61e82aea44f6c063548930daea86dee017e1f47ffe2f85532222c2d07da
-
SSDEEP
3072:/Ko9Cy5gQ+/wvNbnNINfq0RmbYtFwzlX4:b3gQwAN1KsIC2
Malware Config
Signatures
Files
-
1944231940b3832a4ad56eaec34de58db5327fc50641011bd1402897efd19818.exe windows x86
4627d3624bcc006d2f29daa68ae8a1de
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord695
ord513
ord524
DllFunctionCall
ord670
__vbaExceptHandler
ord712
ord319
ProcCallEngine
ord644
ord100
ord619
Sections
.text Size: 80KB - Virtual size: 77KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 896B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ