Static task
static1
Behavioral task
behavioral1
Sample
535c1dfbe05296b5bfd7b47216b8b8761d6b0251503017b59fba51f9cbcccf2a.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
535c1dfbe05296b5bfd7b47216b8b8761d6b0251503017b59fba51f9cbcccf2a.exe
Resource
win10v2004-20220901-en
General
-
Target
535c1dfbe05296b5bfd7b47216b8b8761d6b0251503017b59fba51f9cbcccf2a
-
Size
137KB
-
MD5
5f32b270e71caa6e51c497affa71bda0
-
SHA1
c9fc0bc7c68af7b802907901673ce1e36dd6d159
-
SHA256
535c1dfbe05296b5bfd7b47216b8b8761d6b0251503017b59fba51f9cbcccf2a
-
SHA512
b06a5990f3bad358893f098313f12c71f81ce8504e85f74f4f047bd7fbbb264d70789b7f6dd68a33908b6c5fae1c63806a05a81b568c5fe818d6837e32c29c30
-
SSDEEP
1536:0o0+D2jmrMxhpVNl5TL9FaNoPovA6j14nO3QtbZu:5YmyNl5TXwoQvAE+Ogt9
Malware Config
Signatures
Files
-
535c1dfbe05296b5bfd7b47216b8b8761d6b0251503017b59fba51f9cbcccf2a.exe windows x86
60f8c48f8b280ce27943a53e85c7111f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winspool.drv
PrinterProperties
user32
GetProcessWindowStation
gdi32
Chord
msvbvm60
ord183
ord697
ord698
ord557
ord598
ord520
ord709
ord631
ord632
ord526
EVENT_SINK_AddRef
ord528
ord561
DllFunctionCall
ord563
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord537
ord644
ord647
ord570
ord681
ord100
ord616
ord432
ord617
Sections
.text Size: 121KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ