Static task
static1
Behavioral task
behavioral1
Sample
fb9f4b34165671106f260e52092f83724e641f394008c2392496410a1501ab96.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fb9f4b34165671106f260e52092f83724e641f394008c2392496410a1501ab96.exe
Resource
win10v2004-20220812-en
General
-
Target
fb9f4b34165671106f260e52092f83724e641f394008c2392496410a1501ab96
-
Size
520KB
-
MD5
4ef3e38c79c0f8721d86e8cadc27f76e
-
SHA1
649b6afc0cede9b6e8319eb2e399b7684c431756
-
SHA256
fb9f4b34165671106f260e52092f83724e641f394008c2392496410a1501ab96
-
SHA512
d00e505fa0c7ec74238117bd68bdddf5279aef5cba9bb75a727c7a5579761b4680837d76235c5cea08d9994bc784b27ee8c06a5cdc2328d3e408dab7aa3a794e
-
SSDEEP
12288:2EO2xluUSkBXCUCQYctf6brmD4Md8CqwUZN0kBzbkzbI:2OSU9YWc6D4W86UZN04ck
Malware Config
Signatures
Files
-
fb9f4b34165671106f260e52092f83724e641f394008c2392496410a1501ab96.exe windows x86
e16f8cd36f4e2d3f7583af15e2c9eb78
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord516
ord593
ord594
ord631
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord717
ProcCallEngine
ord644
ord537
ord570
ord648
ord572
ord573
ord685
ord578
ord100
ord619
ord581
Sections
.text Size: 68KB - Virtual size: 66KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 448KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ