Static task
static1
Behavioral task
behavioral1
Sample
873ce2bb4bcc03a4e4d1284947c0a153d4d40b12cda3abe396b08dd963cadf4e.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
873ce2bb4bcc03a4e4d1284947c0a153d4d40b12cda3abe396b08dd963cadf4e.exe
Resource
win10v2004-20220901-en
General
-
Target
873ce2bb4bcc03a4e4d1284947c0a153d4d40b12cda3abe396b08dd963cadf4e
-
Size
208KB
-
MD5
4cdef64a363d0a29dc2400c31fab9cdf
-
SHA1
b05ee30ebdab144080dfc0a1d07747947d62b3c4
-
SHA256
873ce2bb4bcc03a4e4d1284947c0a153d4d40b12cda3abe396b08dd963cadf4e
-
SHA512
ecf11f20d7d19dffb9d46074016f6d35c856eab40ad9741c158f2f0a53514eae6f04536dc74f1b3722ced9bf01bd9df65159553c326188ffff7942f4ef2883c8
-
SSDEEP
6144:vhPBarKpVfHNmyzbejxdrmQrVLXLrUHLSUvtSwsv:ZPwrofIy/S3rNu1VHsv
Malware Config
Signatures
Files
-
873ce2bb4bcc03a4e4d1284947c0a153d4d40b12cda3abe396b08dd963cadf4e.exe windows x86
375c7402f8748b0ff0440c4212cdf8d8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ExitProcess
GetModuleHandleA
msvbvm60
__vbaVarSub
Sections
pec1 Size: 22KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ztss Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.krsrc Size: 140KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hxkqalo Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE