Static task
static1
Behavioral task
behavioral1
Sample
af7830d50ebc3f4fdbf91597df6a1910b601625084dddf86f7b8c36780eeee28.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
af7830d50ebc3f4fdbf91597df6a1910b601625084dddf86f7b8c36780eeee28.exe
Resource
win10v2004-20221111-en
General
-
Target
af7830d50ebc3f4fdbf91597df6a1910b601625084dddf86f7b8c36780eeee28
-
Size
321KB
-
MD5
00874ad258661728dfea75003739000f
-
SHA1
23810da150dd23cda6e9b18fa6adedd89fb65ac3
-
SHA256
af7830d50ebc3f4fdbf91597df6a1910b601625084dddf86f7b8c36780eeee28
-
SHA512
76e4af3d639380c1a1e46f952983590273718599a8303ab7d7e5b81462d7ebd2c44a39c90327dd3bbc886a118496a31f6228c33ad7226ac4ec980c5b9a124ec2
-
SSDEEP
6144:WdlskAOM5j+AyaepsrrAkEijq9Xy3U4JJXE5LgadV97lp:Wdl4OMJBjkkEijZ8hl
Malware Config
Signatures
Files
-
af7830d50ebc3f4fdbf91597df6a1910b601625084dddf86f7b8c36780eeee28.exe windows x86
d1a0a39215304aeb5396819efb3dcd84
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
msvbvm60
__vbaCopyBytes
Sections
.text Size: 284KB - Virtual size: 480KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE