Static task
static1
Behavioral task
behavioral1
Sample
c79b28b8683586dcc2c88cff4d261750c4ad67009d1df03650163a19e813bd95.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c79b28b8683586dcc2c88cff4d261750c4ad67009d1df03650163a19e813bd95.exe
Resource
win10v2004-20220901-en
General
-
Target
c79b28b8683586dcc2c88cff4d261750c4ad67009d1df03650163a19e813bd95
-
Size
118KB
-
MD5
6f447fa31b3150829311fc7cf876e720
-
SHA1
37b3e4d4679e53d36c98eae3e3aa9c6a8a954d71
-
SHA256
c79b28b8683586dcc2c88cff4d261750c4ad67009d1df03650163a19e813bd95
-
SHA512
b1b4cf1f6ae6b3a8b9014a07f07f43699590c1a931cda208cf2f5c357a9976682d5ed35f576d924720baebc21672e351055d113e502d5ca749434697b790d401
-
SSDEEP
1536:JbqdmlC5HA1LuZ+RylbGfR9TQ2g8cifaxKwld3DkE2KVONMHgrbtEOd/6SOWq:kA1L8Q7f3ixzzBHgrbtEO4SOWq
Malware Config
Signatures
Files
-
c79b28b8683586dcc2c88cff4d261750c4ad67009d1df03650163a19e813bd95.exe windows x86
1ba999fa2f9c9f5aecde18dc985429fa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord183
ord582
ord586
ord589
ord697
ord698
MethCallEngine
ord519
ord598
ord631
ord709
ord632
ord526
EVENT_SINK_AddRef
ord527
ord563
ord678
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord537
ord644
ord647
ord570
ord681
ord100
ord616
ord432
Sections
.text Size: 98KB - Virtual size: 98KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ