Static task
static1
Behavioral task
behavioral1
Sample
06e50ac78e9e137b01adf9c475f5b1403f5ebfb2ce28d24a023527179242dc6e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
06e50ac78e9e137b01adf9c475f5b1403f5ebfb2ce28d24a023527179242dc6e.exe
Resource
win10v2004-20220901-en
General
-
Target
06e50ac78e9e137b01adf9c475f5b1403f5ebfb2ce28d24a023527179242dc6e
-
Size
31KB
-
MD5
82c0201102a42985e208aa2b13ada943
-
SHA1
20d70be4c4678932d789f5a009856deaf651ce59
-
SHA256
06e50ac78e9e137b01adf9c475f5b1403f5ebfb2ce28d24a023527179242dc6e
-
SHA512
46913e670c4a5a422e20ba1807008232ff0b332d33149dfc57aee02e082b0d6cee5f56b7388111c926504c781af72833e40462d464dc3bc7e2fbf74c8af59ce6
-
SSDEEP
768:52aZs1VyQMWd8kZbyBzalCQYz4mpmP8kwzHrK1lMn1d18CMBn3:52aqDyQ7d3cXzdE8k0HrcsY
Malware Config
Signatures
Files
-
06e50ac78e9e137b01adf9c475f5b1403f5ebfb2ce28d24a023527179242dc6e.exe windows x86
d60cc55af3c5b2f816262d0e885a08e9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
CancelDC
winspool.drv
WaitForPrinterChange
msvbvm60
ord183
ord695
ord669
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord717
ProcCallEngine
ord644
ord570
ord100
ord615
ord432
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 452B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ