Static task
static1
Behavioral task
behavioral1
Sample
2ae1cf4766e5a7150ded98ece33db163f66b8f9915af466388b7aebb2f0f4364.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2ae1cf4766e5a7150ded98ece33db163f66b8f9915af466388b7aebb2f0f4364.exe
Resource
win10v2004-20220812-en
General
-
Target
2ae1cf4766e5a7150ded98ece33db163f66b8f9915af466388b7aebb2f0f4364
-
Size
272KB
-
MD5
00281ad0312f44db3a9e26f132a5ab9d
-
SHA1
53fd8358c4b482552b8d7dcb6026685d6b86d8d5
-
SHA256
2ae1cf4766e5a7150ded98ece33db163f66b8f9915af466388b7aebb2f0f4364
-
SHA512
2e8ee6c92625c977826aa8027fd4f0c24097daed2bd46ef5853178e21efbb840188e5f5d556d5db581099b1656f8f12410c753fda61e31b1744aca76af6a15bf
-
SSDEEP
3072:kzyerVYmjxXLq/ye+zMGV1zfPWjD91M30Cg2q0lh0GSSr0pfiTkjiwXCwjIhhoKi:9YVYmjxXLq/yLPsQ6sh0GVQpfiTLhoH
Malware Config
Signatures
Files
-
2ae1cf4766e5a7150ded98ece33db163f66b8f9915af466388b7aebb2f0f4364.exe windows x86
fd1380527695c196c0b693df8a43bf24
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
RtlMoveMemory
msvbvm60
MethCallEngine
ord516
ord631
EVENT_SINK_AddRef
ord527
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord608
ProcCallEngine
ord644
ord100
ord616
Sections
.text Size: 172KB - Virtual size: 169KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 96KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE