Static task
static1
Behavioral task
behavioral1
Sample
831b837af45173f665d46051e5ca1cf0c5395bb07e11afd84a62d217bea55375.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
831b837af45173f665d46051e5ca1cf0c5395bb07e11afd84a62d217bea55375.exe
Resource
win10v2004-20220901-en
General
-
Target
831b837af45173f665d46051e5ca1cf0c5395bb07e11afd84a62d217bea55375
-
Size
44KB
-
MD5
82e5d56647cab6bd60113f52786a2b70
-
SHA1
012dd6a43a60114670336bc04b59adb951908829
-
SHA256
831b837af45173f665d46051e5ca1cf0c5395bb07e11afd84a62d217bea55375
-
SHA512
ac9946ffb8e45ca8ffe940999766cc3895f2a20adb210e4855f2871fa6261b13ffaa4b6e817335dea66771a3afa415aa19f03303826bf0d2855c1bbb922ec2e1
-
SSDEEP
384:cbmr54uJs3a0NLnIzGN8x2b2vjPxo3w8Du3jsBYRAGryf4pxI/6ps2QdhA4I7m3T:emaucakDI08Kxw8gpyf4pxGAtEN
Malware Config
Signatures
Files
-
831b837af45173f665d46051e5ca1cf0c5395bb07e11afd84a62d217bea55375.exe windows x86
2a12c2247553ce2d0971b60bb140efe3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
CombineRgn
msvbvm60
ord183
ord697
ord698
MethCallEngine
ord598
ord520
ord705
ord631
ord709
ord632
ord526
EVENT_SINK_AddRef
ord527
DllFunctionCall
ord563
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord644
ord647
ord570
ord681
ord100
ord616
ord432
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ