Static task
static1
Behavioral task
behavioral1
Sample
c42be96251daf359fb348ee651af8fb1827e99f4e47366e4bc3fc7b81e8ffc51.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c42be96251daf359fb348ee651af8fb1827e99f4e47366e4bc3fc7b81e8ffc51.exe
Resource
win10v2004-20220901-en
General
-
Target
c42be96251daf359fb348ee651af8fb1827e99f4e47366e4bc3fc7b81e8ffc51
-
Size
44KB
-
MD5
011d6b322ba6e0e54bd44b865991b9a0
-
SHA1
6a00ee2bf3c283e10fd09909928ab7a614396998
-
SHA256
c42be96251daf359fb348ee651af8fb1827e99f4e47366e4bc3fc7b81e8ffc51
-
SHA512
620f330d9bb32ec2e8f01fdfb1d943c2d6157ba4514dc039a8a48ccadae811872d99c6a5416696768f5bb0f1d70dfd77116af174e0a85df9f3857280451f5e6a
-
SSDEEP
384:AbXr54uJsFa0NLnIzAx2b2vjPxu3w8Du3jsBYRAGryf4pxI/6ps2QdhA4I7m3vWN:iXauOakDIsKnw8gpyf4pxGAOWN
Malware Config
Signatures
Files
-
c42be96251daf359fb348ee651af8fb1827e99f4e47366e4bc3fc7b81e8ffc51.exe windows x86
2a12c2247553ce2d0971b60bb140efe3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
CombineRgn
msvbvm60
ord183
ord697
ord698
MethCallEngine
ord598
ord520
ord705
ord631
ord709
ord632
ord526
EVENT_SINK_AddRef
ord527
DllFunctionCall
ord563
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord644
ord647
ord570
ord681
ord100
ord616
ord432
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ