Static task
static1
Behavioral task
behavioral1
Sample
1987f5b6ae1df02ebe95abdd40205054f7dce35324274710cc3a836573fa2152.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1987f5b6ae1df02ebe95abdd40205054f7dce35324274710cc3a836573fa2152.exe
Resource
win10v2004-20220812-en
General
-
Target
1987f5b6ae1df02ebe95abdd40205054f7dce35324274710cc3a836573fa2152
-
Size
217KB
-
MD5
9dd9b9ed2928e3a97c669eb580312da2
-
SHA1
9a7980bba9b51901722da807b50f49455bb0c866
-
SHA256
1987f5b6ae1df02ebe95abdd40205054f7dce35324274710cc3a836573fa2152
-
SHA512
0e8011a7e60ef55bf3d6f5989f45cdd83b7165e3ce842b87c8baca423b5495c9a01e52221993d6064d01cea74820aa25eb9a00e4ea723b9cf858f5648f44f1c1
-
SSDEEP
3072:ZyfO/Y+7IXdeOnKqmZosURJZ9tk61MC/9:qILqN/v9
Malware Config
Signatures
Files
-
1987f5b6ae1df02ebe95abdd40205054f7dce35324274710cc3a836573fa2152.exe windows x86
7e010b2208785b8f1470c32737fac2da
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord696
MethCallEngine
ord516
ord628
ord598
ord709
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord608
ord717
ProcCallEngine
ord644
ord537
Zombie_AddRef
ord681
ord685
ord100
ord616
ord581
Sections
pec1 Size: 160KB - Virtual size: 160KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE