Static task
static1
Behavioral task
behavioral1
Sample
79b98ec5858fc937e797de5c452cd4d2085a5edfb7de16877346ae515ffb6ff2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
79b98ec5858fc937e797de5c452cd4d2085a5edfb7de16877346ae515ffb6ff2.exe
Resource
win10v2004-20220812-en
General
-
Target
79b98ec5858fc937e797de5c452cd4d2085a5edfb7de16877346ae515ffb6ff2
-
Size
228KB
-
MD5
66b86cd122b8d6f14a98f16bcfb9c0c9
-
SHA1
d74dde37c20eadb14cd10677e169b0c9baf070f3
-
SHA256
79b98ec5858fc937e797de5c452cd4d2085a5edfb7de16877346ae515ffb6ff2
-
SHA512
44f712ffe0194cd1b16b5a7ef6bb78042b56456436608b9f9956c34be2ead0dc997b4604dafbaba3235acfadf5f1649be2892aeab82c6d75f885b082f19e3b3d
-
SSDEEP
3072:ZKQ0/zQYsaF7tL+4oOcDQlkUxuTQRmHhAW0NyG3O:ZqoGtL
Malware Config
Signatures
Files
-
79b98ec5858fc937e797de5c452cd4d2085a5edfb7de16877346ae515ffb6ff2.exe windows x86
a1aa4840a531b16b25938364c44e510a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord516
ord518
ord626
ord558
ord666
ord669
ord593
ord594
ord595
ord597
ord598
ord599
ord520
ord709
ord631
ord525
ord632
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord713
ord606
ord608
ord716
ord717
ProcCallEngine
ord644
ord537
ord645
ord570
ord648
ord573
ord681
ord576
ord578
ord685
ord100
ord616
ord617
ord619
ord581
Sections
.text Size: 220KB - Virtual size: 219KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ