Static task
static1
Behavioral task
behavioral1
Sample
935ac33438ed428d1b6b1c73942d7aa93be90d4783c65d07ab9c2dfc8e20fa4c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
935ac33438ed428d1b6b1c73942d7aa93be90d4783c65d07ab9c2dfc8e20fa4c.exe
Resource
win10v2004-20220812-en
General
-
Target
935ac33438ed428d1b6b1c73942d7aa93be90d4783c65d07ab9c2dfc8e20fa4c
-
Size
144KB
-
MD5
cce7ca4c369e1e5935c2bab7997ffe43
-
SHA1
c6f4ce18b5a89ca7b35f207ab8538c8ecd2a11c3
-
SHA256
935ac33438ed428d1b6b1c73942d7aa93be90d4783c65d07ab9c2dfc8e20fa4c
-
SHA512
f1b73ec2a1c1cd63f4db61c89733593b934805faa2a224c6360e148c2d7acef48affa00b3258c584dccbcdfc8ce0abd69350f920613dbc0881ab008f86c3d297
-
SSDEEP
3072:jCErocfawqdX9SITFBBtjGxR1r7n+FSQmICMUpxNj:jCQ/fawwgIPBtah+PmIC
Malware Config
Signatures
Files
-
935ac33438ed428d1b6b1c73942d7aa93be90d4783c65d07ab9c2dfc8e20fa4c.exe windows x86
d1a0a39215304aeb5396819efb3dcd84
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
msvbvm60
__vbaCopyBytes
Sections
.text Size: 127KB - Virtual size: 252KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE