Static task
static1
Behavioral task
behavioral1
Sample
e1fffe4bec61b2b52331e173b87aa050caec0745b87af72b1b365f05eceb818e.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e1fffe4bec61b2b52331e173b87aa050caec0745b87af72b1b365f05eceb818e.exe
Resource
win10v2004-20220812-en
General
-
Target
e1fffe4bec61b2b52331e173b87aa050caec0745b87af72b1b365f05eceb818e
-
Size
32KB
-
MD5
7938a6ae054b127e5ac4e3bb4bef46b0
-
SHA1
bb6d4e2a2400bf738abe7b37364b9facfaf00d90
-
SHA256
e1fffe4bec61b2b52331e173b87aa050caec0745b87af72b1b365f05eceb818e
-
SHA512
cb52c0c6e4cce904cfbb7f516f3b5f5de2e52a463e38111eb6ab41080c3e802fd49f00a78b87bf86c9aa1aa580b8076257fb0ab8bc45ca3bd63341ee44dfe1d1
-
SSDEEP
384:0WdUZNHUX5BKJGcx6ZVUESCssOJvy6JB7Ep5qq+FnfjkTYYyqdCKp90gD1:0WUZJxgcaUZCspqp5XojEYYyGpGgh
Malware Config
Signatures
Files
-
e1fffe4bec61b2b52331e173b87aa050caec0745b87af72b1b365f05eceb818e.exe windows x86
cfcb89fefe618fdfd76a5dcb5548c1a4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
imm32
ImmGetContext
winspool.drv
AbortPrinter
winmm
midiStreamStop
msvbvm60
ord183
ord697
ord552
ord556
ord630
ord631
ord632
ord526
EVENT_SINK_AddRef
ord527
DllFunctionCall
ord563
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord717
ProcCallEngine
ord537
ord644
ord647
ord570
ord681
ord100
ord432
Sections
.text Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ