Static task
static1
Behavioral task
behavioral1
Sample
d258e662603e64e970ca3c06f09e5350f8d5ee747f73d83988d3575c53b7e4c9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d258e662603e64e970ca3c06f09e5350f8d5ee747f73d83988d3575c53b7e4c9.exe
Resource
win10v2004-20220812-en
General
-
Target
d258e662603e64e970ca3c06f09e5350f8d5ee747f73d83988d3575c53b7e4c9
-
Size
80KB
-
MD5
0edac12bb54dd38b6e1cb9fd2de04a70
-
SHA1
e48a5e56ae4a9fa0c5f4d78a3d94263876c90f58
-
SHA256
d258e662603e64e970ca3c06f09e5350f8d5ee747f73d83988d3575c53b7e4c9
-
SHA512
a257bd880ceb39698c1e79eeccc28b708ae854d8465ebb760bc0f61c64a843a20231e571c393ce5481991f8a77769084d84cff396f82c3a279ad2fc7135d842e
-
SSDEEP
1536:clqHA+Qdt87kJ5o9RBbVWn3ZizsnCYeSGMH6uOxUz4wmnfV9zgmeq:dAa7kJy9RBcnwzsnvNHZVmnjzgm
Malware Config
Signatures
Files
-
d258e662603e64e970ca3c06f09e5350f8d5ee747f73d83988d3575c53b7e4c9.exe windows x86
9aa29dcead31601bf23eddb79aa13227
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
lz32
LZSeek
gdi32
CloseMetaFile
imm32
ImmGetDefaultIMEWnd
msvbvm60
ord183
ord552
ord669
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord714
ord717
ProcCallEngine
ord644
ord570
ord100
ord432
Sections
.text Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 496B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ