Static task
static1
Behavioral task
behavioral1
Sample
784b39d8c99a152c80f5204b3703802057567f441fb58aaaaadd9ed3e628e74f.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
784b39d8c99a152c80f5204b3703802057567f441fb58aaaaadd9ed3e628e74f.exe
Resource
win10v2004-20220901-en
General
-
Target
784b39d8c99a152c80f5204b3703802057567f441fb58aaaaadd9ed3e628e74f
-
Size
32KB
-
MD5
81b9dd4f7928488b0961580b86064bd0
-
SHA1
e76736d1a1b668872a8dc3239ee2c89d2e37f12c
-
SHA256
784b39d8c99a152c80f5204b3703802057567f441fb58aaaaadd9ed3e628e74f
-
SHA512
f00200a692044b5ac697420fbf4e72e5b09e52810baaf1f5a1c2a35f0d57682246f3c6996e707e7caac35dcb583dd8e5a41b4f9e0690d4afc3227dbed86e08db
-
SSDEEP
384:03dEZNHUX5OK5l6ZVUESCssOJvy6JB7Ep5qq+FnfjkTYYyqdCN+Or551:0NEZJ+5mUZCspqp5XojEYYyJ+s5H
Malware Config
Signatures
Files
-
784b39d8c99a152c80f5204b3703802057567f441fb58aaaaadd9ed3e628e74f.exe windows x86
cfcb89fefe618fdfd76a5dcb5548c1a4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
imm32
ImmGetContext
winspool.drv
AbortPrinter
winmm
midiStreamStop
msvbvm60
ord183
ord697
ord552
ord556
ord630
ord631
ord632
ord526
EVENT_SINK_AddRef
ord527
DllFunctionCall
ord563
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord717
ProcCallEngine
ord537
ord644
ord647
ord570
ord681
ord100
ord432
Sections
.text Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ