Static task
static1
Behavioral task
behavioral1
Sample
2b204c8d99ac42f4e2778a8c7e995eddfa4aa0d1218b677ed3df14f76b382c06.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2b204c8d99ac42f4e2778a8c7e995eddfa4aa0d1218b677ed3df14f76b382c06.exe
Resource
win10v2004-20220812-en
General
-
Target
2b204c8d99ac42f4e2778a8c7e995eddfa4aa0d1218b677ed3df14f76b382c06
-
Size
36KB
-
MD5
02fe5dfc3e87f229f7b81c4b6e08c192
-
SHA1
3dbdcf51acf106de47f08ed639a781eebd194e8d
-
SHA256
2b204c8d99ac42f4e2778a8c7e995eddfa4aa0d1218b677ed3df14f76b382c06
-
SHA512
8193fb002a9d3003aa520cafa8abfd0ff37766b71a1c9b7305a4f870ee5e96ba46d6eba7802dad3004a81caa896b586fea68ec19baeeb5f32c37b86daa0b5b89
-
SSDEEP
768:Evp3VQexqnYv0NFeYGwLEObEFTu6Yw+lJYCyZj:Eh3VQexvInz4OMi65+lJA
Malware Config
Signatures
Files
-
2b204c8d99ac42f4e2778a8c7e995eddfa4aa0d1218b677ed3df14f76b382c06.exe windows x86
01d2bd638f0a976b01a69b7fb5b85b2b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
AreAllAccessesGranted
kernel32
MulDiv
msvbvm60
ord183
ord669
EVENT_SINK_AddRef
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord714
ord717
ProcCallEngine
ord644
ord570
ord649
ord100
ord432
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ