Static task
static1
Behavioral task
behavioral1
Sample
e1dc3ab0e4aef850214246760ffa16f6e51d8ebc4fe85f6235f49cebc599a8e7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e1dc3ab0e4aef850214246760ffa16f6e51d8ebc4fe85f6235f49cebc599a8e7.exe
Resource
win10v2004-20220812-en
General
-
Target
e1dc3ab0e4aef850214246760ffa16f6e51d8ebc4fe85f6235f49cebc599a8e7
-
Size
140KB
-
MD5
4c2a9c9fb36bad6495b7c085de27d9fd
-
SHA1
52e9fd97cfa5bca3f253ee5cd85afe81432a22af
-
SHA256
e1dc3ab0e4aef850214246760ffa16f6e51d8ebc4fe85f6235f49cebc599a8e7
-
SHA512
ea9bdf1bf59f20d4afdcc8ba0f41acb479d27c89cf7ad82211e5d28a4ef6e453ae161c0038f520b6d32921a90e01a60725703c574da7172f6f434a5cde820153
-
SSDEEP
768:V1iWPHOF3W8oMIbk6KQVEs8rA7FdM9M6Ap9rAiJ:viWf83W8F60Is26ApuiJ
Malware Config
Signatures
Files
-
e1dc3ab0e4aef850214246760ffa16f6e51d8ebc4fe85f6235f49cebc599a8e7.exe windows x86
ea23fc29d95be057d4e7c6b77d74a60d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord626
ord595
ord598
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord716
ProcCallEngine
ord535
ord645
ord570
ord571
ord576
ord100
ord617
ord581
Sections
.text Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
uplzlwh Size: - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
klgngok Size: - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ycvujxv Size: 52KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE