Static task
static1
Behavioral task
behavioral1
Sample
b87cc81f6b7028913e709ef2c9163905032fb574a4849038130ddc05af9c0b58.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b87cc81f6b7028913e709ef2c9163905032fb574a4849038130ddc05af9c0b58.exe
Resource
win10v2004-20221111-en
General
-
Target
b87cc81f6b7028913e709ef2c9163905032fb574a4849038130ddc05af9c0b58
-
Size
202KB
-
MD5
cf99189d19cfc6954256892a1f0e1362
-
SHA1
ce066faa4e9b823fe4c3f41a4ba857fb4c701990
-
SHA256
b87cc81f6b7028913e709ef2c9163905032fb574a4849038130ddc05af9c0b58
-
SHA512
1502683b01875f8cbaac848f9aedeb193fc13b6118b75a4651ce4e5ea9ffd8489b1d9f7baf14208492b96476655224a5029674f87f5e4ea94a23701eaadbbcd8
-
SSDEEP
3072:GS6bEg8AHqDdGLQ/OCRfdj/Q5XxlWuy4Re68aVoadRsQLMrICHAw5ZnlOA:GHIF7DzhexlWuyOp9sQIbTv
Malware Config
Signatures
Files
-
b87cc81f6b7028913e709ef2c9163905032fb574a4849038130ddc05af9c0b58.exe windows x86
d69c6479660f6fc7022a75a7d35f4ebe
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
msvbvm60
__vbaVarSub
Sections
.text Size: 173KB - Virtual size: 584KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE