Static task
static1
Behavioral task
behavioral1
Sample
416d0d7dbea6ad6e637e61a67301ffd3188af87d11e0ea7efe25e2a97e4eccf7.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
416d0d7dbea6ad6e637e61a67301ffd3188af87d11e0ea7efe25e2a97e4eccf7.exe
Resource
win10v2004-20230220-en
General
-
Target
416d0d7dbea6ad6e637e61a67301ffd3188af87d11e0ea7efe25e2a97e4eccf7
-
Size
6.6MB
-
MD5
55c97f9af186bb501eefc2e982843f80
-
SHA1
997b605dca460e4f552a227d9a5b2dc705a3cef1
-
SHA256
416d0d7dbea6ad6e637e61a67301ffd3188af87d11e0ea7efe25e2a97e4eccf7
-
SHA512
edb0bc8cc9cc23c68e5d52b55aee3796d29dfd3e474f3edf87e5ea894f1542b0e13d77cc371f3979a2d4df0747daebb598a4d0353b89171c93edc3c279902888
-
SSDEEP
196608:jX13ys2cmk15Xkm1YWDu0QGpBQvq8B4S6gHYl:BincmcSm1C0vh8/Yl
Malware Config
Signatures
Files
-
416d0d7dbea6ad6e637e61a67301ffd3188af87d11e0ea7efe25e2a97e4eccf7.exe windows x86
801fe4064ba15978bca5b90b38949cd8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
__vbaR8FixI4
kernel32
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
CharUpperBuffW
Sections
.text Size: - Virtual size: 819KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.TbA Size: - Virtual size: 3.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.e6M Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.68A Size: 5.2MB - Virtual size: 5.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.F'A Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.res0 Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ