Static task
static1
Behavioral task
behavioral1
Sample
aaebd682efa8edc1a92adccd4e8c884f630996e374f23b943954916952edb827.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
aaebd682efa8edc1a92adccd4e8c884f630996e374f23b943954916952edb827.exe
Resource
win10v2004-20220812-en
General
-
Target
aaebd682efa8edc1a92adccd4e8c884f630996e374f23b943954916952edb827
-
Size
664KB
-
MD5
3a9fa0d14f8efa46b9337ec89ee2b820
-
SHA1
a31f5cef3fdd6637097665fd6cfbb9c34bb46c7e
-
SHA256
aaebd682efa8edc1a92adccd4e8c884f630996e374f23b943954916952edb827
-
SHA512
063e69dc749bd2d2794acc3e8a6ca083c3e5337678661d621c2b3869687ac6d08b00d4e43909db83727ba327982182722371a60867c9ca7ddf2fc651d9cb4859
-
SSDEEP
12288:pY47oqBwMjTSClbZerlbTjFePueexbcTZBhNjxLPgjOjAleogNGVWKDPH:pYcPaVePueexbcTZBhNjFPgjEAleHGjP
Malware Config
Signatures
Files
-
aaebd682efa8edc1a92adccd4e8c884f630996e374f23b943954916952edb827.exe windows x86
6a01f746b00c8dfdabad729528571ffb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord516
ord518
ord553
ord660
ord558
ord591
ord300
ord595
ord304
ord598
ord306
ord520
ord631
ord632
ord526
EVENT_SINK_AddRef
ord528
ord562
DllFunctionCall
ord563
ord670
EVENT_SINK_Release
ord310
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord312
ord711
ord712
ord714
ord608
ord716
ProcCallEngine
ord537
ord681
ord685
ord100
ord610
ord616
ord617
ord618
ord619
ord542
ord650
ord545
ord546
ord581
Sections
.text Size: 336KB - Virtual size: 335KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 324KB - Virtual size: 344KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE