Static task
static1
Behavioral task
behavioral1
Sample
aa5c13d107e7bd2dcf77ddf9aa30b63f6aaa204aeedcc5dcf5de1d816347fe22.exe
Resource
win7-20220812-en
General
-
Target
aa5c13d107e7bd2dcf77ddf9aa30b63f6aaa204aeedcc5dcf5de1d816347fe22
-
Size
60KB
-
MD5
6fe5824b91772031a3c38f6d0bccb922
-
SHA1
2c1aee51c165ac82a13547a5941a280b61be6eed
-
SHA256
aa5c13d107e7bd2dcf77ddf9aa30b63f6aaa204aeedcc5dcf5de1d816347fe22
-
SHA512
422ef221fa3938b3c966d5e431e6e0a33cb74f83ba8845860d955ed394cf90d80a1061e35b46a4ea9b774a3774e1dc87c2e7000d65026cb9e7eb20e6f09131cb
-
SSDEEP
768:FIoLUvm28MOpZQMF6KqLlhtddCQyHgRjtiEGbkoYjEreoZkq5Fk1II2JF489fH51:OohwOTnFDqLXsfHgOAyeih5q1IL9KIhH
Malware Config
Signatures
Files
-
aa5c13d107e7bd2dcf77ddf9aa30b63f6aaa204aeedcc5dcf5de1d816347fe22.exe windows x86
533e6adf3c2cc52333e661cc707926bc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord620
ord516
ord519
ord553
ord666
ord667
ord593
ord594
ord598
ord520
ord631
ord632
ord525
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord713
ord607
ord608
ord716
ord717
ProcCallEngine
ord537
ord644
ord645
ord648
ord570
ord578
ord685
ord100
ord616
ord617
ord542
ord545
ord546
Sections
.text Size: 52KB - Virtual size: 50KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ