Static task
static1
Behavioral task
behavioral1
Sample
9931211b3c1559072303c436e5e223f20996095df00c1e004b5fa5aba6b819fa.exe
Resource
win7-20220901-en
General
-
Target
9931211b3c1559072303c436e5e223f20996095df00c1e004b5fa5aba6b819fa
-
Size
41KB
-
MD5
178e8e7480d95ae0027b39d209e86d6b
-
SHA1
3fccbfd1e5b537abf8e3796f6c48b4ba867451ef
-
SHA256
9931211b3c1559072303c436e5e223f20996095df00c1e004b5fa5aba6b819fa
-
SHA512
9a76f67fb1c38cfeb1f9d4f4b444950a58dc59807820a2ee880980c221a8927410e351bd1ce9108a8a816000615cf38a8b50baa24e79b18c82189982d0587b0b
-
SSDEEP
768:R14NdA5BTo5NQKlYbNFDnjS6sAc39JPSxsbK8:RmNdgoblWJBn3sAQJPzK8
Malware Config
Signatures
Files
-
9931211b3c1559072303c436e5e223f20996095df00c1e004b5fa5aba6b819fa.exe windows x86
d1a0a39215304aeb5396819efb3dcd84
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
msvbvm60
__vbaCopyBytes
Sections
.text Size: 33KB - Virtual size: 144KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE