Static task
static1
Behavioral task
behavioral1
Sample
1bc278c8d5f7b7881529359903c06a8ac60fb8d48688b806f8907d1e32d33b06.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1bc278c8d5f7b7881529359903c06a8ac60fb8d48688b806f8907d1e32d33b06.exe
Resource
win10v2004-20220812-en
General
-
Target
1bc278c8d5f7b7881529359903c06a8ac60fb8d48688b806f8907d1e32d33b06
-
Size
288KB
-
MD5
6fb71e3cadb17a5936b10d90f27307c7
-
SHA1
cbff33b506dcea5b66552c99f82dddc0ffb991bf
-
SHA256
1bc278c8d5f7b7881529359903c06a8ac60fb8d48688b806f8907d1e32d33b06
-
SHA512
a4d8b58bdb4a158d0bb2039e469c1823e87079fabf85e1b01999bc66909975c47a075e4b75db850824b0772c30327269a2dd745bec86b4605741cd1e74afdc14
-
SSDEEP
6144:EoGFIsooU31XwfPM5dySLmXnyOD9wKwsIrUDZ7NB8d5rT8:1mIsox31XwfPBimXVpbsK74
Malware Config
Signatures
Files
-
1bc278c8d5f7b7881529359903c06a8ac60fb8d48688b806f8907d1e32d33b06.exe windows x86
db84e016c3fdc4297e497f47c41674cc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord582
ord583
ord584
ord585
ord693
ord588
ord698
MethCallEngine
ord512
ord514
ord518
ord519
ord629
ord553
ord661
ord662
ord556
ord558
ord559
ord591
ord592
ord594
ord595
ord598
ord704
ord706
ord521
ord707
ord523
ord525
ord632
ord633
ord526
EVENT_SINK_AddRef
ord634
ord527
ord528
ord560
ord562
DllFunctionCall
ord670
ord564
ord672
ord673
ord674
ord676
EVENT_SINK_Release
ord679
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord608
ord643
ord537
ord538
ord649
ord680
ord685
ord100
ord613
ord614
ord616
ord540
ord619
ord544
ord545
ord655
ord658
ord581
Sections
.text Size: 268KB - Virtual size: 264KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ