Static task
static1
Behavioral task
behavioral1
Sample
51ddf43a2557e00d4f5704fa4030b18ffa40dc467203cd172fd08f7e99706399.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
51ddf43a2557e00d4f5704fa4030b18ffa40dc467203cd172fd08f7e99706399.exe
Resource
win10v2004-20220812-en
General
-
Target
51ddf43a2557e00d4f5704fa4030b18ffa40dc467203cd172fd08f7e99706399
-
Size
102KB
-
MD5
018c1754a79b8814df52867f4b5430c3
-
SHA1
12372e28dc62021d19f47ba16cc9cc3f18611272
-
SHA256
51ddf43a2557e00d4f5704fa4030b18ffa40dc467203cd172fd08f7e99706399
-
SHA512
006f48e5ff0aab6eb67ea07fd1f783576394b3cc0f201833b79e8f90b316ccce364ec2823421e307f350cdc869afa9b107387e248a722ad29a4aac0bc320f0db
-
SSDEEP
1536:a64hRgUZ1qTbKyy2rqE/pnZ7YafblXsKdabfo2QNRwI:q4bKynrTxZ7YafblXsKda0s
Malware Config
Signatures
Files
-
51ddf43a2557e00d4f5704fa4030b18ffa40dc467203cd172fd08f7e99706399.exe windows x86
cdeade61ae62dc2d0566a615eb2e0683
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetProcessWindowStation
msvbvm60
ord183
ord696
ord698
MethCallEngine
ord516
ord519
ord557
ord598
ord709
ord632
ord526
EVENT_SINK_AddRef
ord527
ord563
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ord608
ord717
ProcCallEngine
ord537
ord644
ord647
ord570
ord573
ord681
ord100
ord616
ord432
ord617
Sections
.text Size: 97KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ