Static task
static1
Behavioral task
behavioral1
Sample
eff1214bf8bd2c28a3bf9da72f21fb004d999a320f47bd74fea9135322458056.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
eff1214bf8bd2c28a3bf9da72f21fb004d999a320f47bd74fea9135322458056.exe
Resource
win10v2004-20220812-en
General
-
Target
eff1214bf8bd2c28a3bf9da72f21fb004d999a320f47bd74fea9135322458056
-
Size
20KB
-
MD5
f6a1f7288f45581696230eb369504872
-
SHA1
27bee676ca737d8741c171d294cf73e7581a1a48
-
SHA256
eff1214bf8bd2c28a3bf9da72f21fb004d999a320f47bd74fea9135322458056
-
SHA512
5284a0fafef48621a2af08cc8d3bc6532cfe44d41f74f95f0681a7d3a92e50b98152f889d99a9887b06f94f5a89a113ec70dcd31ef039212d3ef3c23d04ec80d
-
SSDEEP
192:HAN0gplfYiNUE3Ow5yd+CQydiLJmQLPlz8w:H80g4iGEf5ydDQydWmQL9Yw
Malware Config
Signatures
Files
-
eff1214bf8bd2c28a3bf9da72f21fb004d999a320f47bd74fea9135322458056.exe windows x86
da884687db5116b5a6d1e0db1a7aec8e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord516
ord593
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ProcCallEngine
ord570
ord576
ord100
ord616
ord617
Sections
.text Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ