Static task
static1
Behavioral task
behavioral1
Sample
42de4c823def1caf9f9b4f3c6245595daf6da6bd540334cde92eece75e4d7a4d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
42de4c823def1caf9f9b4f3c6245595daf6da6bd540334cde92eece75e4d7a4d.exe
Resource
win10v2004-20220812-en
General
-
Target
42de4c823def1caf9f9b4f3c6245595daf6da6bd540334cde92eece75e4d7a4d
-
Size
32KB
-
MD5
833ce923d79105f9635528270f3f7c68
-
SHA1
7c967651f9ae88703ae8416cd7fbd1766b4440c1
-
SHA256
42de4c823def1caf9f9b4f3c6245595daf6da6bd540334cde92eece75e4d7a4d
-
SHA512
a3df62b1b17e88278cee3907684fa593a65bce7ed52db6730c0cae940b0e570015a6885a4a650e55f2eef8cc1f11558df5550497cf5f592c26094fbf536c8025
-
SSDEEP
768:oPLS0OZFYFLx9pSYKxNxhkQqL3FitHUbt5kV61Vp:oPL1yFYRx9pSzh6Qw3Fit0cVeV
Malware Config
Signatures
Files
-
42de4c823def1caf9f9b4f3c6245595daf6da6bd540334cde92eece75e4d7a4d.exe windows x86
b913185f2e205b1af04ae0e2a4770acf
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
AreAllAccessesGranted
kernel32
MulDiv
msvbvm60
ord183
ord585
ord665
ord669
EVENT_SINK_AddRef
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord570
ord100
ord432
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 580B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ