Static task
static1
Behavioral task
behavioral1
Sample
b503f8cbf794bf4e28f2830306088dfd5987a7a6fc418d25951891d64803e1bd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b503f8cbf794bf4e28f2830306088dfd5987a7a6fc418d25951891d64803e1bd.exe
Resource
win10v2004-20220812-en
General
-
Target
b503f8cbf794bf4e28f2830306088dfd5987a7a6fc418d25951891d64803e1bd
-
Size
56KB
-
MD5
6175b2ba2fab002d2d1892c0943e7ae0
-
SHA1
ce918fb26db4de9f3c6d374bef72fdb3b62aabd0
-
SHA256
b503f8cbf794bf4e28f2830306088dfd5987a7a6fc418d25951891d64803e1bd
-
SHA512
2b010bbd80f96d97d9be87784d6efef4897e713c1d07fe2d1f48489aa5881e5e321e1da59b302d21a5931d7ed0bc5a5e1aba7271b634cf1c0d21646c5b475201
-
SSDEEP
768:cprs0H7a9u+TB7AD4GT6qBlrf6BGbN6MNrtEBqEA1+3S65c+:cprrmB1AQBGZ6GpEBq2x
Malware Config
Signatures
Files
-
b503f8cbf794bf4e28f2830306088dfd5987a7a6fc418d25951891d64803e1bd.exe windows x86
56f5a629a4de0001c5810ad3095cef00
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord584
ord585
ord187
MethCallEngine
ord626
ord558
ord301
ord598
ord307
ord709
ord526
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord717
ProcCallEngine
ord644
ord647
ord572
ord100
ord617
ord618
ord542
Sections
.text Size: 32KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ