Static task
static1
Behavioral task
behavioral1
Sample
cb80c23442009c3cc647e1756cd4476ca6c88f3397e6c61bca07c7de7150764f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cb80c23442009c3cc647e1756cd4476ca6c88f3397e6c61bca07c7de7150764f.exe
Resource
win10v2004-20220812-en
General
-
Target
cb80c23442009c3cc647e1756cd4476ca6c88f3397e6c61bca07c7de7150764f
-
Size
25KB
-
MD5
80fe0306be9de48e7b02a9ff890bb840
-
SHA1
bb21c0249e144711478e8bb7b25694c28f81ff12
-
SHA256
cb80c23442009c3cc647e1756cd4476ca6c88f3397e6c61bca07c7de7150764f
-
SHA512
6893e05f139a1816b671106e1021b235d4a33c00f142929e283b1ed58b323ccd478c0799d0b7399d5e56ca6642b42dc396738f8ace3f0b5be434336d74b886ec
-
SSDEEP
384:4u8eNZU3fKrGw/+MdlYiagYQtLoz6JB/E65p24FWSDdYxy9listIASLG1:4u8ez5rGw/blqgYk+65p2O5YxyOsCAJ
Malware Config
Signatures
Files
-
cb80c23442009c3cc647e1756cd4476ca6c88f3397e6c61bca07c7de7150764f.exe windows x86
cb2239d229da90a791484db667ace8c7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
imm32
ImmGetContext
winspool.drv
AbortPrinter
winmm
midiStreamStop
msvbvm60
ord183
ord691
ord697
ord703
ord705
ord631
ord632
ord526
EVENT_SINK_AddRef
ord527
DllFunctionCall
ord563
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord717
ProcCallEngine
ord537
ord644
ord647
ord570
ord681
ord100
ord432
Sections
.text Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ