Static task
static1
Behavioral task
behavioral1
Sample
e14b6b59892ff51d63836940ed5c93bfe2a7daccff6c5e77ef2c818a2acf305a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e14b6b59892ff51d63836940ed5c93bfe2a7daccff6c5e77ef2c818a2acf305a.exe
Resource
win10v2004-20220812-en
General
-
Target
e14b6b59892ff51d63836940ed5c93bfe2a7daccff6c5e77ef2c818a2acf305a
-
Size
84KB
-
MD5
520e9aec142686ed2cec739d379c5330
-
SHA1
dff8a41caf314824b651cc2605a85710e2bd82c3
-
SHA256
e14b6b59892ff51d63836940ed5c93bfe2a7daccff6c5e77ef2c818a2acf305a
-
SHA512
a886ca3f1bce00fcdecb28eec9b3d48c96d8d9e9767327a3cdff33124e4a48498b97626b1c6940915eb3539567e7c56852223832bba0f5507a8cdcd5b73b8bf5
-
SSDEEP
1536:Vjwr+Ucxh6Kg1K8Zq8dH0zCzRjNNPQI2:F3xRcH06RhJh2
Malware Config
Signatures
Files
-
e14b6b59892ff51d63836940ed5c93bfe2a7daccff6c5e77ef2c818a2acf305a.exe windows x86
35e7d74dceee7b24faaa119393978fbb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
lz32
LZInit
gdi32
BitBlt
advapi32
CloseEventLog
msvbvm60
ord183
ord697
MethCallEngine
ord661
ord522
ord631
ord632
ord526
EVENT_SINK_AddRef
ord527
ord528
DllFunctionCall
ord563
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord717
ProcCallEngine
ord644
ord647
ord570
ord681
ord100
ord432
ord617
ord619
Sections
.text Size: 76KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ