Static task
static1
Behavioral task
behavioral1
Sample
1ba1791a57554e752e5d348d37488f972dfee379b7c5ca43a326348306a5dc64.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
1ba1791a57554e752e5d348d37488f972dfee379b7c5ca43a326348306a5dc64.exe
Resource
win10v2004-20220901-en
General
-
Target
1ba1791a57554e752e5d348d37488f972dfee379b7c5ca43a326348306a5dc64
-
Size
36KB
-
MD5
6e23271e2cb294c78d548fbe0d719dc0
-
SHA1
f7adc611c437ba46b37442004f4ae8be8f68bafe
-
SHA256
1ba1791a57554e752e5d348d37488f972dfee379b7c5ca43a326348306a5dc64
-
SHA512
8baeaae0ae689bc60c2ad76a01f3c1f5c65d39fb73250a6ccd68e245b49d22cc5cfb24f8e46ee301c5dc39aae8fe68f0f2d16b87003977750445c20a4f210d8c
-
SSDEEP
768:MU+VpQq9Ma6RCJzUCWy0zG8Vj+LGT81x7xGQGbSE:MUFqy+OK8Y6QVGe
Malware Config
Signatures
Files
-
1ba1791a57554e752e5d348d37488f972dfee379b7c5ca43a326348306a5dc64.exe windows x86
a92caa3f365fc8ebc166a2268eec66ef
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord183
ord583
MethCallEngine
ord515
ord552
ord594
ord522
EVENT_SINK_AddRef
ord670
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord570
ord100
ord432
Sections
.text Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ