Static task
static1
Behavioral task
behavioral1
Sample
720a8e9b9648213dcd02f5998fe6fb4cf4570528a66c9ac42c0b85eb7fb90c45.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
720a8e9b9648213dcd02f5998fe6fb4cf4570528a66c9ac42c0b85eb7fb90c45.exe
Resource
win10v2004-20221111-en
General
-
Target
720a8e9b9648213dcd02f5998fe6fb4cf4570528a66c9ac42c0b85eb7fb90c45
-
Size
48KB
-
MD5
477aa2b79f856be2a0e646c0cd767320
-
SHA1
951f6125c5b441578ba00da3d7dd9da2ad6613e6
-
SHA256
720a8e9b9648213dcd02f5998fe6fb4cf4570528a66c9ac42c0b85eb7fb90c45
-
SHA512
3a87765f0216f262bdba64be352a2320c97f0a3fe5becdfe246a257e14903d6a33d5cdc7971b42b64fae33ad2ed74de17eba05a30e53c677d004db499e404f2c
-
SSDEEP
768:UAV1JqcBnOT7NTgO2UHdaZH6yDC9VavyOAuxs:UAVFIVgo6CWvD/xs
Malware Config
Signatures
Files
-
720a8e9b9648213dcd02f5998fe6fb4cf4570528a66c9ac42c0b85eb7fb90c45.exe windows x86
03db0db89ac800a2a306c3c0d9424652
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
lz32
LZSeek
gdi32
CombineRgn
msvbvm60
ord183
ord697
ord698
MethCallEngine
ord598
ord703
ord520
ord631
ord709
ord632
ord526
EVENT_SINK_AddRef
ord527
DllFunctionCall
ord563
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord644
ord647
ord570
ord681
ord100
ord616
ord432
Sections
.text Size: 32KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ