Static task
static1
Behavioral task
behavioral1
Sample
496f2efa6f3be2eebefe10897739e9b49b1c8ac354ad72272ba1bea09f5fb44a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
496f2efa6f3be2eebefe10897739e9b49b1c8ac354ad72272ba1bea09f5fb44a.exe
Resource
win10v2004-20220901-en
General
-
Target
496f2efa6f3be2eebefe10897739e9b49b1c8ac354ad72272ba1bea09f5fb44a
-
Size
31KB
-
MD5
0f97ea7e1d1f072feeb691c3ae81b0d0
-
SHA1
2ca887a8a9e69557fc4219f86e68147e014ceae3
-
SHA256
496f2efa6f3be2eebefe10897739e9b49b1c8ac354ad72272ba1bea09f5fb44a
-
SHA512
b28f1fc4d65a3ef49a69c85223d5a43c6cdc8f1cba0e3e27594d0fac50aa61f9f91b9c56b359ba4e46761f4679591287d93df26d3d2ee407fe8bed6830283071
-
SSDEEP
768:8/D4HB2Dx4u8NWNQt/4oTeV6qcrCK2XOjlM:UD4hmaqsxycrCbiK
Malware Config
Signatures
Files
-
496f2efa6f3be2eebefe10897739e9b49b1c8ac354ad72272ba1bea09f5fb44a.exe windows x86
429dd33fde6de50221aa49c762911951
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
CancelDC
winspool.drv
WaitForPrinterChange
msvbvm60
ord183
ord669
EVENT_SINK_AddRef
ord562
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord570
ord649
ord100
ord615
ord432
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 452B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ