Static task
static1
Behavioral task
behavioral1
Sample
ba105a612fa415bf1541ad57509d6fc24e013b5ccf593df9a1d6ffe8d2680546.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ba105a612fa415bf1541ad57509d6fc24e013b5ccf593df9a1d6ffe8d2680546.exe
Resource
win10v2004-20220901-en
General
-
Target
ba105a612fa415bf1541ad57509d6fc24e013b5ccf593df9a1d6ffe8d2680546
-
Size
128KB
-
MD5
0fd22ecc304f06c1bedc7594b4c11546
-
SHA1
83df8b8480d05f18a52c5fc49b32c74fb37e09b2
-
SHA256
ba105a612fa415bf1541ad57509d6fc24e013b5ccf593df9a1d6ffe8d2680546
-
SHA512
3aed39eff3f406ae8d61b82b80e6534a7b2f561b66f8a718a1ae134929d9b345a9d41ba0fffe0bc3b3375f2c1598a7c6d5f6036df46c5d2b217c7faa9b5751b7
-
SSDEEP
3072:pBdwgqEPicyQTsnQuV0RynCx/8yzhuFAUE:zGgdio4nQ8nUUyzhkE
Malware Config
Signatures
Files
-
ba105a612fa415bf1541ad57509d6fc24e013b5ccf593df9a1d6ffe8d2680546.exe windows x86
4f82b42c6060ed5c2b09621730b82fb5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RevertToSelf
winmm
midiStreamPause
mpr
WNetConnectionDialog
msvbvm60
MethCallEngine
Zombie_QueryInterface
EVENT_SINK_AddRef
ord673
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord644
ord100
ord652
ord545
Sections
.text Size: 92KB - Virtual size: 89KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ