Static task
static1
Behavioral task
behavioral1
Sample
b41f809ce965b2a10a3af65bbb384996145577f05ff4d1d2064ed2680b60a5f7.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b41f809ce965b2a10a3af65bbb384996145577f05ff4d1d2064ed2680b60a5f7.exe
Resource
win10v2004-20220812-en
General
-
Target
b41f809ce965b2a10a3af65bbb384996145577f05ff4d1d2064ed2680b60a5f7
-
Size
36KB
-
MD5
0b2a3dc29744a64cbe2d4d657aaf2742
-
SHA1
2560152d92cce1b0d3edbcac78d975d451480c18
-
SHA256
b41f809ce965b2a10a3af65bbb384996145577f05ff4d1d2064ed2680b60a5f7
-
SHA512
58b13b05026c80d03c5ef37c38ac863ad5ea6c1b08579eb8947b3aa769244036fe943d45ac6bfe54e34e868b6d256097347876629bd3a7bd90992601b7d6f71e
-
SSDEEP
768:nWyQE2KGoDQwEtBL8z5j7Jhflw+lJYCyZs:nWd5U9EBL8z5fJhfy+lJv
Malware Config
Signatures
Files
-
b41f809ce965b2a10a3af65bbb384996145577f05ff4d1d2064ed2680b60a5f7.exe windows x86
01d2bd638f0a976b01a69b7fb5b85b2b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
AreAllAccessesGranted
kernel32
MulDiv
msvbvm60
ord183
ord669
EVENT_SINK_AddRef
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord714
ord717
ProcCallEngine
ord644
ord570
ord649
ord100
ord432
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ