Static task
static1
Behavioral task
behavioral1
Sample
aea302086f2a4b6ae802b006626888895afa490f3233164eab533c6c20733c75.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
aea302086f2a4b6ae802b006626888895afa490f3233164eab533c6c20733c75.exe
Resource
win10v2004-20221111-en
General
-
Target
aea302086f2a4b6ae802b006626888895afa490f3233164eab533c6c20733c75
-
Size
40KB
-
MD5
1ca9cf1819b34bb395e5aa00eb4f18a0
-
SHA1
98966f7664cd556800b7544f88176c605fdb0b53
-
SHA256
aea302086f2a4b6ae802b006626888895afa490f3233164eab533c6c20733c75
-
SHA512
44784f7aae8312f5006eb2c328b2728943d70191aba80447c55364ff0b652128418819fc07c973af5cd24abb54fd7f567acabd48fea1824e4da53de654c3bfb6
-
SSDEEP
768:M/ygrU4m6vtEBfOraxaNVu+70Uy8I6WYpy48g:M/XY4m6vtE0eabuIygc48g
Malware Config
Signatures
Files
-
aea302086f2a4b6ae802b006626888895afa490f3233164eab533c6c20733c75.exe windows x86
9f97657d66d13919984674c8ab82ed73
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
netshell
DllCanUnloadNow
msvbvm60
ord552
ord557
ord669
ord594
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord570
ord100
ord615
ord432
ord652
Sections
.text Size: 32KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 872B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ