Static task
static1
Behavioral task
behavioral1
Sample
e44064c7637bf1397f985bc88a1705baad3837efb3a87570a8dac72866106b52.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e44064c7637bf1397f985bc88a1705baad3837efb3a87570a8dac72866106b52.exe
Resource
win10v2004-20220901-en
General
-
Target
e44064c7637bf1397f985bc88a1705baad3837efb3a87570a8dac72866106b52
-
Size
128KB
-
MD5
0bc85168751fe17da15453f051fc7311
-
SHA1
3cff133d39fc1b6dac10d51174caef8dad3867ae
-
SHA256
e44064c7637bf1397f985bc88a1705baad3837efb3a87570a8dac72866106b52
-
SHA512
8f4808d8e0799966d9b56640ed13a2d3a038ad05825e86db051f035c589e7893de5fd75c8f92abd73d5872502ead93f356922d1283fbbb1b18254bdee9c68cd9
-
SSDEEP
1536:nMss8nX4/OVb3x44fNCww9taxQaeEG2sPybCNoIGPHCEUDYUpv21VEKbxbEqyPYh:LsHuxnNUx2wwCNtCUDYUp2bEKyVQUgl
Malware Config
Signatures
Files
-
e44064c7637bf1397f985bc88a1705baad3837efb3a87570a8dac72866106b52.exe windows x86
1386e9c82f090687004f1ba7b6010b9a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RevertToSelf
user32
GetThreadDesktop
winspool.drv
AbortPrinter
msvbvm60
ord695
ord698
MethCallEngine
Zombie_QueryInterface
EVENT_SINK_AddRef
ord528
ord560
ord672
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ProcCallEngine
ord644
ord100
ord547
Sections
.text Size: 92KB - Virtual size: 89KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ