Static task
static1
Behavioral task
behavioral1
Sample
5f816875b66e1d865cc527c76b403be9ecf0d726df9443a5eff3a7cea62d460a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5f816875b66e1d865cc527c76b403be9ecf0d726df9443a5eff3a7cea62d460a.exe
Resource
win10v2004-20220901-en
General
-
Target
5f816875b66e1d865cc527c76b403be9ecf0d726df9443a5eff3a7cea62d460a
-
Size
36KB
-
MD5
b26020bcc7a80a3cc22a36b527e48135
-
SHA1
203eee0cdaf7a5383a7c9d5f9e4dcc47601345d2
-
SHA256
5f816875b66e1d865cc527c76b403be9ecf0d726df9443a5eff3a7cea62d460a
-
SHA512
05970856b886d308a9a143f6c4a9f87ba2ec75128db19797021ec7f6b5f530da4838101b0089fe226094e9f56c86d8567f562a558a7124bb7dc88fc26e6c7f4a
-
SSDEEP
384:q4grWOn4rDKr4BOrjsTwYUih9i+7oZBi5ZyzFAloMsAQeD:qSOnQDKr40jSUY7MZBi5RoqN
Malware Config
Signatures
Files
-
5f816875b66e1d865cc527c76b403be9ecf0d726df9443a5eff3a7cea62d460a.exe windows x86
8f6f6355ccde8cb85b08ecbeae2eb605
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord690
MethCallEngine
ord595
ord598
ord709
ord631
ord525
EVENT_SINK_AddRef
ord529
DllFunctionCall
ord564
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord537
ord644
ord648
ord572
ord685
ord100
ord689
ord610
ord617
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ