Static task
static1
Behavioral task
behavioral1
Sample
17ba1644363ab23c122bb127ebd4ccc7e5e4b71243ebafd17178a6704474573a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
17ba1644363ab23c122bb127ebd4ccc7e5e4b71243ebafd17178a6704474573a.exe
Resource
win10v2004-20220812-en
General
-
Target
17ba1644363ab23c122bb127ebd4ccc7e5e4b71243ebafd17178a6704474573a
-
Size
88KB
-
MD5
880f264233fe0ee8edee3200db822570
-
SHA1
4f20c3ff1206f5cd78c6e867a78b9044073034f9
-
SHA256
17ba1644363ab23c122bb127ebd4ccc7e5e4b71243ebafd17178a6704474573a
-
SHA512
7ecd3d3b39380509aa1d30d1e406ad418d1b32b5665e6485e5e4d45c9909d4aefe2569fa20d9a1d96c408320e7756060d11c3a3b5700893bb92bc60d095e2252
-
SSDEEP
1536:Wsjf4mp2eGIduUQlghgqpvbaVkHcy2dy+lKilhXf:54SuFQbahVhXf
Malware Config
Signatures
Files
-
17ba1644363ab23c122bb127ebd4ccc7e5e4b71243ebafd17178a6704474573a.exe windows x86
d80cc578cbae1f5f403fe68c24142745
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
netshell
DllCanUnloadNow
msvbvm60
ord552
ord669
ord598
ord520
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord570
ord100
ord432
ord652
ord545
Sections
.text Size: 72KB - Virtual size: 71KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 872B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ