Static task
static1
Behavioral task
behavioral1
Sample
a1ffec89a3a507d2a7a0252ad2fffc4df865cc437ed278cc886bf9061f94deb6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a1ffec89a3a507d2a7a0252ad2fffc4df865cc437ed278cc886bf9061f94deb6.exe
Resource
win10v2004-20220812-en
General
-
Target
a1ffec89a3a507d2a7a0252ad2fffc4df865cc437ed278cc886bf9061f94deb6
-
Size
24KB
-
MD5
6a038ef64ad118599964d2c4195321f3
-
SHA1
96daa91da4c7df7cdbe6331835dab807ca0901aa
-
SHA256
a1ffec89a3a507d2a7a0252ad2fffc4df865cc437ed278cc886bf9061f94deb6
-
SHA512
33198bc71237a7b7c767c6d98c0977c7b3d50a65dd28a1472ae28dd29631f89cedab056c48c2ae1d745a32dd332814057df6e795fb6105ecf62cab0a91a058ed
-
SSDEEP
384:UYJK/lldy6Y41FYsJ84H5y1HDgd5OogHt0F:UEQZY41FY2p5aUuy
Malware Config
Signatures
Files
-
a1ffec89a3a507d2a7a0252ad2fffc4df865cc437ed278cc886bf9061f94deb6.exe windows x86
4af22468a0726e72a3433e7241c4c3db
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord690
ord583
MethCallEngine
ord516
ord554
ord664
ord592
ord522
ord709
ord631
ord632
ord526
EVENT_SINK_AddRef
ord527
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord644
ord571
ord100
ord687
ord689
ord610
ord616
Sections
.text Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ