Static task
static1
Behavioral task
behavioral1
Sample
2a1608cd4021b48ef8fbbc00aa2af9a628ea9cb50756e2dd85c24ef7ca4bc56e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2a1608cd4021b48ef8fbbc00aa2af9a628ea9cb50756e2dd85c24ef7ca4bc56e.exe
Resource
win10v2004-20220812-en
General
-
Target
2a1608cd4021b48ef8fbbc00aa2af9a628ea9cb50756e2dd85c24ef7ca4bc56e
-
Size
36KB
-
MD5
a2ae94bf17f2758370aecda413f244e6
-
SHA1
56036e88d968ead1a9aa166ae7184eadb2665dd8
-
SHA256
2a1608cd4021b48ef8fbbc00aa2af9a628ea9cb50756e2dd85c24ef7ca4bc56e
-
SHA512
900695fca1e23a12f7e00b5d98a249457ab9f3041eb7ea04580b9a647261957a77bebcea62ce6949d1bef82b6ac01cd10f82a9f0d209c522989380d327413795
-
SSDEEP
768:WDBHrdVK+LZPIfnI1HnX5SvChJN+gBufqtqfIBPhby:WDBHbLZwfnI1qCf7O
Malware Config
Signatures
Files
-
2a1608cd4021b48ef8fbbc00aa2af9a628ea9cb50756e2dd85c24ef7ca4bc56e.exe windows x86
4f82b42c6060ed5c2b09621730b82fb5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RevertToSelf
winmm
midiStreamPause
mpr
WNetConnectionDialog
msvbvm60
MethCallEngine
Zombie_QueryInterface
EVENT_SINK_AddRef
ord673
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord644
ord100
ord652
ord545
Sections
.text Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ