Static task
static1
Behavioral task
behavioral1
Sample
2c07b864ad44e56387ba6f6ed98498bb4f5c5d25f942728b7b0842da8560146b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2c07b864ad44e56387ba6f6ed98498bb4f5c5d25f942728b7b0842da8560146b.exe
Resource
win10v2004-20220812-en
General
-
Target
2c07b864ad44e56387ba6f6ed98498bb4f5c5d25f942728b7b0842da8560146b
-
Size
65KB
-
MD5
501ff86cf6323b48feb38f2ad3694aea
-
SHA1
b34a9cb0e85c6e74c39062b99e809b58b52812f5
-
SHA256
2c07b864ad44e56387ba6f6ed98498bb4f5c5d25f942728b7b0842da8560146b
-
SHA512
e99193192acb40203d53df89809b49b5a2044ce11b72e88ef07aa986086f718ea4dfc26ed961bcb64d3e5a6f35821f38ad952cf894dd24a98634fc289f3c4977
-
SSDEEP
768:efVvcgfxCWLvBlHa4LIushRaDkJ23Gj3TEJdeQaOmb1wkGq6+sQCGVjdrcPK3Qm:GJx5XaPIDu2WzT6eQa9EwCGdOPK3x
Malware Config
Signatures
Files
-
2c07b864ad44e56387ba6f6ed98498bb4f5c5d25f942728b7b0842da8560146b.exe windows x86
7a8bbdf3be06a0d4f48bc45138282198
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvfw32
ICSendMessage
ICSeqCompressFrameEnd
ICGetDisplayFormat
MCIWndCreateW
ICRemove
kernel32
UnmapViewOfFile
lstrlenA
WriteFile
SetUnhandledExceptionFilter
RaiseException
CloseHandle
ExitProcess
GetCommandLineA
GetModuleHandleA
GetStartupInfoA
GetVersionExA
MapViewOfFile
msvbvm60
__vbaAryRebase1Var
__vbaFileCloseAll
__vbaCyAdd
__vbaCheckType
__vbaAryRecMove
advapi32
LsaDeleteTrustedDomain
LsaICLookupSids
RegOpenKeyExA
LsaCreateTrustedDomainEx
wininet
InternetReadFile
InternetConnectA
InternetCanonicalizeUrlA
FindFirstUrlCacheEntryA
FindFirstUrlCacheGroup
user32
IsCharLowerA
CharLowerA
ole32
OleInitialize
WriteFmtUserTypeStg
WriteClassStm
WriteClassStg
CoCreateInstance
CoGetClassObject
CoGetMalloc
CoInitialize
CoUninitialize
CreateDataAdviseHolder
GetConvertStg
OleDuplicateData
OleGetClipboard
StringFromGUID2
OleSaveToStream
OleSetClipboard
OleUninitialize
dsound
DirectSoundFullDuplexCreate
DirectSoundEnumerateW
DirectSoundEnumerateA
DirectSoundCaptureEnumerateA
Sections
.text Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ