Static task
static1
Behavioral task
behavioral1
Sample
5105fc3e66475812a9dc6883ed0aaffdd5b78c51b5651fddbab607e419e85bc3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5105fc3e66475812a9dc6883ed0aaffdd5b78c51b5651fddbab607e419e85bc3.exe
Resource
win10v2004-20220812-en
General
-
Target
5105fc3e66475812a9dc6883ed0aaffdd5b78c51b5651fddbab607e419e85bc3
-
Size
25KB
-
MD5
96c89b536cb21a071b83c68f89d3c960
-
SHA1
a4b5eb7931e222851aa380799c77a008fde6e599
-
SHA256
5105fc3e66475812a9dc6883ed0aaffdd5b78c51b5651fddbab607e419e85bc3
-
SHA512
4d5154c43480c957ccb39155c3c4ac00a99a4e055557905d890fbf231dfea8f730b7a2ca625e2f836e961b8df72b236e27385242c114113827a0fa1f5e3c2d59
-
SSDEEP
384:ox8eNZU3GKr3RMdlYiagYQtLoz6JB/E65p24FWSDdYxy9l4NCd7hiV1:ox8ezArAlqgYk+65p2O5YxycNCaz
Malware Config
Signatures
Files
-
5105fc3e66475812a9dc6883ed0aaffdd5b78c51b5651fddbab607e419e85bc3.exe windows x86
cb2239d229da90a791484db667ace8c7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
imm32
ImmGetContext
winspool.drv
AbortPrinter
winmm
midiStreamStop
msvbvm60
ord183
ord691
ord697
ord703
ord705
ord631
ord632
ord526
EVENT_SINK_AddRef
ord527
DllFunctionCall
ord563
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord717
ProcCallEngine
ord537
ord644
ord647
ord570
ord681
ord100
ord432
Sections
.text Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ