Static task
static1
Behavioral task
behavioral1
Sample
3cb274701aa7c692d3bee18d4f2309beda88d1da0786af7578648adacaf709fb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3cb274701aa7c692d3bee18d4f2309beda88d1da0786af7578648adacaf709fb.exe
Resource
win10v2004-20220812-en
General
-
Target
3cb274701aa7c692d3bee18d4f2309beda88d1da0786af7578648adacaf709fb
-
Size
159KB
-
MD5
6a4aadbfc15566b21384a18a786c60f5
-
SHA1
9bbe949c705fb118433026e28d12dc976c207b8f
-
SHA256
3cb274701aa7c692d3bee18d4f2309beda88d1da0786af7578648adacaf709fb
-
SHA512
588c4cecbf3c6c766a160dee93956f3ce21360b3fec2d73e49b0fd4602b836da912a3241784e8dc619d127e39f348442ed7ae3ecee02f8326c22e7dfcaa04d0c
-
SSDEEP
3072:k0B5O8DKq4hzs2HGLnzKyHRjlOOPaYPv+NAbvmMQg33VHbMx+GSzfgxK048VGP:k0BU8Czs2+OyigjuGv33Nwx+G588E
Malware Config
Signatures
Files
-
3cb274701aa7c692d3bee18d4f2309beda88d1da0786af7578648adacaf709fb.exe windows x86
b9383b0dbd844ffd279aedc70a4265a6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
DeregisterEventSource
msvbvm60
ord183
ord589
ord553
ord668
ord594
EVENT_SINK_AddRef
DllFunctionCall
ord563
ord670
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord714
ord717
ProcCallEngine
ord537
ord644
ord570
ord100
ord615
ord432
ord547
Sections
.text Size: 148KB - Virtual size: 147KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ