Static task
static1
Behavioral task
behavioral1
Sample
94b9aee492500dee18d795dded391b2dca26ab27c74397ed4328705f5bc8f3ec.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
94b9aee492500dee18d795dded391b2dca26ab27c74397ed4328705f5bc8f3ec.exe
Resource
win10v2004-20220812-en
General
-
Target
94b9aee492500dee18d795dded391b2dca26ab27c74397ed4328705f5bc8f3ec
-
Size
104KB
-
MD5
6d3a1943f6ee222ba619c51c8fc571c1
-
SHA1
590408291cf80cdd39626ab0e362627adc09a966
-
SHA256
94b9aee492500dee18d795dded391b2dca26ab27c74397ed4328705f5bc8f3ec
-
SHA512
585d3bb09b2cfa020b150a5ae26ba56e9d9a959bc55d9ef9eab3a06c60db526202877fc6ff8dab474738ac8c853d0a025a528b07211ff41f727e1906f94174af
-
SSDEEP
1536:6bxBdQ2HY3TS5/3MHdaM57f5PcMMBxUxW:b2HY3TS5/Etf5RxW
Malware Config
Signatures
Files
-
94b9aee492500dee18d795dded391b2dca26ab27c74397ed4328705f5bc8f3ec.exe windows x86
9d7c1e3ddcd36084b51fd9f1c2759b22
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord690
ord696
MethCallEngine
ord516
ord628
ord593
ord300
ord594
ord595
ord303
ord599
ord306
ord309
ord631
ord525
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
ord563
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord717
ProcCallEngine
ord644
ord537
ord645
ord648
ord571
ord573
ord100
ord689
ord616
ord617
ord650
Sections
.text Size: 96KB - Virtual size: 93KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ