Static task
static1
Behavioral task
behavioral1
Sample
eb32b8e9839a0789004a8ddda11f5d84cb1f50a56409bf0a8a760b321632c5e7.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
eb32b8e9839a0789004a8ddda11f5d84cb1f50a56409bf0a8a760b321632c5e7.exe
Resource
win10v2004-20221111-en
General
-
Target
eb32b8e9839a0789004a8ddda11f5d84cb1f50a56409bf0a8a760b321632c5e7
-
Size
129KB
-
MD5
7d7d00d896925489135247defa433073
-
SHA1
b4e73cd4f7cbe85572aad290ae955e69921a30a2
-
SHA256
eb32b8e9839a0789004a8ddda11f5d84cb1f50a56409bf0a8a760b321632c5e7
-
SHA512
5f300582392768030382bf3ab64491913f453c35ef7fc2bb7be27b5c2c97c3016d5e2cf467b4247f8518308b82944c78ae9b7275134572fb3e9d3d69545352c0
-
SSDEEP
3072:wg6H3EYtD81kHMFiwKxpv2DuHxyFmzSIBj+MYR4:jO3LtY2aibxpeDCxyFASyx
Malware Config
Signatures
Files
-
eb32b8e9839a0789004a8ddda11f5d84cb1f50a56409bf0a8a760b321632c5e7.exe windows x86
d1a0a39215304aeb5396819efb3dcd84
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
msvbvm60
__vbaCopyBytes
Sections
.text Size: 122KB - Virtual size: 216KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE