Static task
static1
Behavioral task
behavioral1
Sample
0D68C0B7843FA97AA4A8820EE1C7A8DE70D2F1B36D115.exe
Resource
win7-20220414-en
General
-
Target
0D68C0B7843FA97AA4A8820EE1C7A8DE70D2F1B36D115.exe
-
Size
1.8MB
-
MD5
74014427b135871d2597e75e67c57200
-
SHA1
6a69db7d0e6eff14400b497da1a3a38f3183e753
-
SHA256
0d68c0b7843fa97aa4a8820ee1c7a8de70d2f1b36d1150a3af9dfd19bb70e888
-
SHA512
e5d6b0aad5fe75104b9d0b830972a7b46d22f06cb7b7d611c0e3055cb81209647557342e6a9422b1a14bc73fa6914bae4fbca0a748a8389c89d5d20a2bcbd438
-
SSDEEP
12288:Mtb2wBZ0IAGlM8tAVkqiCrQ2zWNJMt7gxWDCs5ai:0BZjqsAECrhIJc7tDCs0
Malware Config
Signatures
Files
-
0D68C0B7843FA97AA4A8820EE1C7A8DE70D2F1B36D115.exe.exe windows x86
a6e54289f74326322739c1cea7bb1065
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord553
ord557
ord666
ord596
ord703
ord598
ord704
ord707
ord633
EVENT_SINK_AddRef
ord560
ord561
DllFunctionCall
ord673
ord674
ord569
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord714
ord530
ord531
ord609
ord532
ord647
ord685
ord100
ord616
ord617
ord544
Sections
.text Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ