Static task
static1
Behavioral task
behavioral1
Sample
e6495c024885f757d7a135fa2461e046756d756b68159e9fccadd225d05feaa8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e6495c024885f757d7a135fa2461e046756d756b68159e9fccadd225d05feaa8.exe
Resource
win10v2004-20220812-en
General
-
Target
e6495c024885f757d7a135fa2461e046756d756b68159e9fccadd225d05feaa8
-
Size
120KB
-
MD5
3570854f61620f61bca17c3c9520e811
-
SHA1
7318a682b2cefe1441d39141b03f278a2cec698f
-
SHA256
e6495c024885f757d7a135fa2461e046756d756b68159e9fccadd225d05feaa8
-
SHA512
b269df293402e127e53f5663fc2c6eb3fa1eebdc1aff368cc5a061e2289dc683c3829cd5fe260af113d9844bd85a2f43a7c236ca9ea8674234156433734827d3
-
SSDEEP
1536:j11HEkZFgTVcoI40BBBiPdAhmP0Jtra+2jj5J1+HeI6rS2LKllHa9eDukmKS:HXPb4FwTrOjT1myS2LKllbDRZS
Malware Config
Signatures
Files
-
e6495c024885f757d7a135fa2461e046756d756b68159e9fccadd225d05feaa8.exe windows x86
13d16ef5c48307ed7b85b49711e53ecb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
EVENT_SINK_AddRef
ord670
ord671
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord319
ProcCallEngine
ord644
ord100
ord544
Sections
.text Size: 100KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ