Static task
static1
Behavioral task
behavioral1
Sample
2a5dcfb598d34504b2cf035851bc1e436ab55652764dcde6c0634a264b111e17.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2a5dcfb598d34504b2cf035851bc1e436ab55652764dcde6c0634a264b111e17.exe
Resource
win10v2004-20220901-en
General
-
Target
2a5dcfb598d34504b2cf035851bc1e436ab55652764dcde6c0634a264b111e17
-
Size
200KB
-
MD5
6d8702c5f3fd4e15a9f769161c829bf5
-
SHA1
5d620f5eeaab0fb3956fb69623389a4bda5ba06e
-
SHA256
2a5dcfb598d34504b2cf035851bc1e436ab55652764dcde6c0634a264b111e17
-
SHA512
ebc956431048c8b52d24076335ad0f34300328955903f02aabf12d56e5f56ed286423681a087fafb03e36949d2ad026e5da33f0984c4ee6aa1d5f06516095d80
-
SSDEEP
1536:tIdcFLZp0dsrYgdRAgH0/m38wIJVOy2JDVhCK8PTSuBfknUQA9hpHR3fd:tIdcFLEdskgrt05bnwhVh6PTPcVA9Pt
Malware Config
Signatures
Files
-
2a5dcfb598d34504b2cf035851bc1e436ab55652764dcde6c0634a264b111e17.exe windows x86
fc39d6bcccc6aed12cc7b3f6f5003c3e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord516
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ProcCallEngine
ord644
ord100
ord617
ord581
Sections
.text Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 116KB - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE