Static task
static1
Behavioral task
behavioral1
Sample
40aaf7d96076dad7ffd50a1504706e5ce63fa359e9ca801e4ccf585bcae6a4b5.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
40aaf7d96076dad7ffd50a1504706e5ce63fa359e9ca801e4ccf585bcae6a4b5.exe
Resource
win10v2004-20220901-en
General
-
Target
40aaf7d96076dad7ffd50a1504706e5ce63fa359e9ca801e4ccf585bcae6a4b5
-
Size
940KB
-
MD5
8493e8f9885db5541eec836fcccc34a7
-
SHA1
881cc5b9df7e5606b45cdc2d68e53e705b666334
-
SHA256
40aaf7d96076dad7ffd50a1504706e5ce63fa359e9ca801e4ccf585bcae6a4b5
-
SHA512
1fc248531b319451230d3f5a1045117f9fe81040e95f37265122133ff10a440bee75b8b84859cb3f176bf9391f89d8d08b94da122d391c7d457a41795151f05e
-
SSDEEP
12288:MAdiB+rDHdvIMYHnJRbaUqdwKd7IC/ZUQTwwYHkxdFjCecD0DI:MAdiBK1YHJRbaUqhVzZxwwYHkhBcD08
Malware Config
Signatures
Files
-
40aaf7d96076dad7ffd50a1504706e5ce63fa359e9ca801e4ccf585bcae6a4b5.exe windows x86
25ab2faf0cfdb39c8559001a0c10e208
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
__vbaVarSub
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
kernel32
GetModuleFileNameW
user32
IsWindow
advapi32
RegQueryValueExA
Sections
.text Size: 12KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 912KB - Virtual size: 912KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ