Static task
static1
Behavioral task
behavioral1
Sample
18caedff04a7427f84625c13920dd691a8babf4ced256781c135a1b437186f9a.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
18caedff04a7427f84625c13920dd691a8babf4ced256781c135a1b437186f9a.exe
Resource
win10v2004-20220812-en
General
-
Target
18caedff04a7427f84625c13920dd691a8babf4ced256781c135a1b437186f9a
-
Size
128KB
-
MD5
7c13efbd82c67495ee96e94512bab7e6
-
SHA1
157085a9cb6753140248a5e44b496d3e860e1b83
-
SHA256
18caedff04a7427f84625c13920dd691a8babf4ced256781c135a1b437186f9a
-
SHA512
96f514dfa6a42b0a2f593609f731aace1d4cf76a579064e8fc24739dad0ae68ed75bdcd4221a99cb163e2b8cd192bb565ee80f060bad4092331bffd4c16fe132
-
SSDEEP
1536:NP37MbW82ZrtMWfbV8sGz6wH/UejkvL60m5gG5izvURK1zfoHp66j1D8UC+7b:mbW8irGG8lz6W//kz60K5OURKdUgURb
Malware Config
Signatures
Files
-
18caedff04a7427f84625c13920dd691a8babf4ced256781c135a1b437186f9a.exe windows x86
edefbe0ade482b3041b62efef9da15a0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
Zombie_QueryInterface
ord556
ord520
ord524
EVENT_SINK_AddRef
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord644
ord538
ord100
ord619
Sections
.text Size: 92KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ