Static task
static1
Behavioral task
behavioral1
Sample
1decf3052427e401cd070d8c7406be0214606875d5145bc68fc90152c66cbda5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1decf3052427e401cd070d8c7406be0214606875d5145bc68fc90152c66cbda5.exe
Resource
win10v2004-20220812-en
General
-
Target
1decf3052427e401cd070d8c7406be0214606875d5145bc68fc90152c66cbda5
-
Size
80KB
-
MD5
ef1b2ffdce25a8e68875883fb0fbaf52
-
SHA1
cda37a617d2da22d57ec8257c2834be86243bcf7
-
SHA256
1decf3052427e401cd070d8c7406be0214606875d5145bc68fc90152c66cbda5
-
SHA512
39ee271cd12ae0041bfe6546ec334caf40620f4aa928268d3563bec87052c55d4fd7798fa820e1c0f5ad6757d047f2e6f18f22c05a8e3f0d4bede8b4ae400177
-
SSDEEP
1536:XNLfzmsCORzy5wiIPrO8/KD9pCB8XG+9aer7:Q0h4IzO3D9pCBaJ
Malware Config
Signatures
Files
-
1decf3052427e401cd070d8c7406be0214606875d5145bc68fc90152c66cbda5.exe windows x86
310645aaef9c5ee3d94459a7d3b7c0ba
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm50
MethCallEngine
ord622
ord519
ord552
ord660
ord593
ord594
ord301
ord595
ord303
ord598
ord520
ord307
ord309
ord631
ord525
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord314
ord606
ord315
ord607
ord316
ord530
ord608
ord531
ord609
ord533
ProcCallEngine
ord535
ord536
ord644
ord537
ord645
ord647
ord570
ord577
ord685
ord578
ord100
ord610
ord611
ord612
ord616
ord617
ord619
ord581
Sections
.text Size: 71KB - Virtual size: 71KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 640B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ