Static task
static1
Behavioral task
behavioral1
Sample
79eca978ca110b83868c4a2ee78591842cb6e66f293893d41d8c34ffb0b74595.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
79eca978ca110b83868c4a2ee78591842cb6e66f293893d41d8c34ffb0b74595.exe
Resource
win10v2004-20220901-en
General
-
Target
79eca978ca110b83868c4a2ee78591842cb6e66f293893d41d8c34ffb0b74595
-
Size
164KB
-
MD5
5c0f7c020266cecb4bba0a828fd2ca99
-
SHA1
0ff2dbf844e3e28b44192920ee703513b3a50fa8
-
SHA256
79eca978ca110b83868c4a2ee78591842cb6e66f293893d41d8c34ffb0b74595
-
SHA512
283a5f01850d02478494f77971a0e6d49ed923b2bbe2eb0a09f074f4c59679dd8af0f98d8e9afdbc0668918da4acec22d4b39d5b2709c78ab60a55bfcbeb6180
-
SSDEEP
1536:Bpku4dpNh3Ce1ivQwTpwPymK+Wf6ef+BA8IVsQ5cQep8prFAPFySR:sQdQcPsE2Ey8ps/R
Malware Config
Signatures
Files
-
79eca978ca110b83868c4a2ee78591842cb6e66f293893d41d8c34ffb0b74595.exe windows x86
c4ae2eae1a4c3b13172e8fb9f0ad1729
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord582
ord583
ord584
ord516
ord593
ord594
ord595
ord520
ord632
EVENT_SINK_AddRef
ord561
DllFunctionCall
ord670
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ProcCallEngine
ord535
ord644
Zombie_AddRef
ord573
ord575
ord100
ord616
ord617
ord581
Sections
.text Size: 156KB - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ