Static task
static1
Behavioral task
behavioral1
Sample
de13fae1c4cb8742e738edbb1ed11ec8b6f9590f5a7207db378bd27b148244da.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
de13fae1c4cb8742e738edbb1ed11ec8b6f9590f5a7207db378bd27b148244da.exe
Resource
win10v2004-20221111-en
General
-
Target
de13fae1c4cb8742e738edbb1ed11ec8b6f9590f5a7207db378bd27b148244da
-
Size
886KB
-
MD5
d5d139ae0b41bd659340053511c2e062
-
SHA1
edfe96ab2f028efe02e6747c5a6977d7122c2f53
-
SHA256
de13fae1c4cb8742e738edbb1ed11ec8b6f9590f5a7207db378bd27b148244da
-
SHA512
96014a6799091669c156c4f207b8b6632cbfb7ce02d614c11f82c6e5ef7eb37cf0e52df08ed7b100e1ba2e83d58cb613c2fe6dbbc1319a6b016c10db51d381ba
-
SSDEEP
24576:IZ4hJDgPYqE031ZwbJT1rr5ansajU1W20PtJ:I+LwE8yJT1rr5atjzZ
Malware Config
Signatures
Files
-
de13fae1c4cb8742e738edbb1ed11ec8b6f9590f5a7207db378bd27b148244da.exe windows x86
88d5c230153e9b0cee0ecaf4c756fba9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
kernel32
GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
msvbvm60
__vbaStrI2
Sections
.text Size: 20KB - Virtual size: 896KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE