Static task
static1
Behavioral task
behavioral1
Sample
61ce68eb02fe9aa21113918b116e33a50e0a10967c72f389d0176cd34f044bbf.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
61ce68eb02fe9aa21113918b116e33a50e0a10967c72f389d0176cd34f044bbf.exe
Resource
win10v2004-20220812-en
General
-
Target
61ce68eb02fe9aa21113918b116e33a50e0a10967c72f389d0176cd34f044bbf
-
Size
483KB
-
MD5
da47b45fdf3ed43c1ba1aa361e476fe0
-
SHA1
201a206c4a02796eaf92185ecdb2b8a03ed64699
-
SHA256
61ce68eb02fe9aa21113918b116e33a50e0a10967c72f389d0176cd34f044bbf
-
SHA512
436832dba2cfd93d9a76d7794f0ecdf319565924265648fc449ec90b578bfc57114ef095c314262fc5846ba105c7caeccc7b146fd11cea136a7dbad91a256daa
-
SSDEEP
6144:yhPBarKpkt7WiO7KlxEiaNXcBJ/nzpzSC3Wbx2i+y69Nr6K5KiZmW:SPwrjt787d+zB3WbQ9MK5Nl
Malware Config
Signatures
Files
-
61ce68eb02fe9aa21113918b116e33a50e0a10967c72f389d0176cd34f044bbf.exe windows x86
375c7402f8748b0ff0440c4212cdf8d8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ExitProcess
GetModuleHandleA
msvbvm60
__vbaVarSub
Sections
pec1 Size: 22KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crsrc Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.T� Size: 232KB - Virtual size: 284KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
oojzfbb Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 111KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE