Static task
static1
Behavioral task
behavioral1
Sample
40e47309367875bd35d332863a5b91717734a29d5992ae53b608d2a4c111ef2c.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
40e47309367875bd35d332863a5b91717734a29d5992ae53b608d2a4c111ef2c.exe
Resource
win10v2004-20221111-en
General
-
Target
40e47309367875bd35d332863a5b91717734a29d5992ae53b608d2a4c111ef2c
-
Size
56KB
-
MD5
124e701967b92decb50d085a52ebd146
-
SHA1
6759717b7eb7d27afa796a0ec415ea5891084efc
-
SHA256
40e47309367875bd35d332863a5b91717734a29d5992ae53b608d2a4c111ef2c
-
SHA512
c2b0200f7b373c6cdfeb828f21174727a25dc8ab56df2e461743fa8ffefe810f4c2ba0544ca949b4d4d70599dce4c6e2c7e23868331f52b06b20b01533ca4b9f
-
SSDEEP
1536:RHk14yKq8vHIDwOWSbO9bPzqhR9vuWIf:A4y3e9brqhR9vuWIf
Malware Config
Signatures
Files
-
40e47309367875bd35d332863a5b91717734a29d5992ae53b608d2a4c111ef2c.exe windows x86
378ee699cef777009d87319aa9d38c25
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mpr
WNetConnectionDialog
advapi32
RevertToSelf
msvbvm60
MethCallEngine
Zombie_QueryInterface
ord702
EVENT_SINK_AddRef
ord562
ord677
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord714
ProcCallEngine
ord644
ord100
Sections
.text Size: 48KB - Virtual size: 46KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ