Static task
static1
Behavioral task
behavioral1
Sample
5810f3441d56e98361b1fb4a9b12a9c13717ad1022da2a1a5cade135fd738f1c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5810f3441d56e98361b1fb4a9b12a9c13717ad1022da2a1a5cade135fd738f1c.exe
Resource
win10v2004-20220812-en
General
-
Target
5810f3441d56e98361b1fb4a9b12a9c13717ad1022da2a1a5cade135fd738f1c
-
Size
59KB
-
MD5
0ad9cd63876ba31c349537a599d7a660
-
SHA1
e9a227c26ee59c0138daa3e0e927dff465afa268
-
SHA256
5810f3441d56e98361b1fb4a9b12a9c13717ad1022da2a1a5cade135fd738f1c
-
SHA512
a939e72083afdbdbe50929268fc8eae9d7591b10aadcc36cc21d44aa71e44169a93735810fca6aba25934c51accea32dd90464da2f060b78dfcfb2d23db627dd
-
SSDEEP
768:7bPk2jpfGbP6tL4yY3cHTYlL2OsebPZByTuWtCo2W:7bPkeM6tL4D3o8lL2Osebbe
Malware Config
Signatures
Files
-
5810f3441d56e98361b1fb4a9b12a9c13717ad1022da2a1a5cade135fd738f1c.exe windows x86
f483d90810fde9c0414f23e93ac96649
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
lz32
LZCopy
winspool.drv
EndPagePrinter
winmm
mixerMessage
msvbvm60
ord183
ord583
MethCallEngine
ord552
ord592
ord631
ord632
ord526
EVENT_SINK_AddRef
ord527
ord528
DllFunctionCall
ord563
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord608
ord717
ProcCallEngine
ord537
ord644
ord647
ord570
ord681
ord100
ord432
Sections
.text Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 620B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ