Static task
static1
Behavioral task
behavioral1
Sample
dc863c2b155b3e72ab29e5bc2ef9b163565e772c4250dc0bbf131bf033100f78.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
dc863c2b155b3e72ab29e5bc2ef9b163565e772c4250dc0bbf131bf033100f78.exe
Resource
win10v2004-20220812-en
General
-
Target
dc863c2b155b3e72ab29e5bc2ef9b163565e772c4250dc0bbf131bf033100f78
-
Size
83KB
-
MD5
9049bf191917a227e1fffc4f0f80aa90
-
SHA1
e56f0b6a7eb81e5f38cb7da359e56dd61b443030
-
SHA256
dc863c2b155b3e72ab29e5bc2ef9b163565e772c4250dc0bbf131bf033100f78
-
SHA512
20c09ee60ba0860d5ae1cffca7e24a47df95630864ad023b3f7ec16ab3346702546dbc67916a77336bff181ea32535e1c9d39a6292c4b8dba18932ba909c45a5
-
SSDEEP
1536:sIWOv8sIxm87bbGwoLNqx+hAc1Xaq/rSyVEIhf49ZcNU:4OvGSOcd/zXak82NU
Malware Config
Signatures
Files
-
dc863c2b155b3e72ab29e5bc2ef9b163565e772c4250dc0bbf131bf033100f78.exe windows x86
d1311ad00ff50a50ea059eeade7faa0b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
lz32
LZSeek
gdi32
CloseMetaFile
imm32
ImmGetDefaultIMEWnd
msvbvm60
ord183
ord691
ord669
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord570
ord100
ord687
ord432
Sections
.text Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ