Behavioral task
behavioral1
Sample
2967c8c45c73bdd45d70b9f610e031e619b5d41c64943f2ac5785c0b5e0c3641.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
2967c8c45c73bdd45d70b9f610e031e619b5d41c64943f2ac5785c0b5e0c3641.exe
Resource
win10v2004-20221111-en
General
-
Target
2967c8c45c73bdd45d70b9f610e031e619b5d41c64943f2ac5785c0b5e0c3641
-
Size
1.1MB
-
MD5
355c7b7f07e28cbc5805dbb054b4f443
-
SHA1
edaf8587cc1403e22808fa153b90ae940f95cc91
-
SHA256
2967c8c45c73bdd45d70b9f610e031e619b5d41c64943f2ac5785c0b5e0c3641
-
SHA512
96cd2ee4f5ce7602c56d491b04a3c748091a3eb972008ee40e964d167c1218b1845c2cd65cc3442f243a023d6aef570d15bddc7cb9c3299675e653ea033d3d64
-
SSDEEP
6144:oWQXBCPCGjEAOoyTmS4MaR38+y6g61ItG0WIHnDOK1fvv00VRL3gVVsWS+8x64W9:oWQWw8t92SAwsWSD
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
2967c8c45c73bdd45d70b9f610e031e619b5d41c64943f2ac5785c0b5e0c3641.exe windows x86
5f8db64747dff4c57e0ad4e1ad2142d5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord516
ord631
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord644
ord100
Sections
UPX0 Size: 960KB - Virtual size: 960KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pebundle Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pebundle Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE