Static task
static1
Behavioral task
behavioral1
Sample
f9ff68be545ba90566673b25f2433e05b36eedab27d82c50e4293002e6acd3b9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f9ff68be545ba90566673b25f2433e05b36eedab27d82c50e4293002e6acd3b9.exe
Resource
win10v2004-20220812-en
General
-
Target
f9ff68be545ba90566673b25f2433e05b36eedab27d82c50e4293002e6acd3b9
-
Size
184KB
-
MD5
3a2690424eb944adf81bed92f9d40a14
-
SHA1
148a66d392aa9d3ba9fbfcc91f85c37e1ebbbba9
-
SHA256
f9ff68be545ba90566673b25f2433e05b36eedab27d82c50e4293002e6acd3b9
-
SHA512
bd6c80b74ec8ebc8dbe074b93797e369b6bf351fe4bd258b54d8dc385090741134f84616f7381ad3d83c54b9ad3dd61ea723c8cd4e8849c14fa6ca551ad2dde1
-
SSDEEP
3072:qKGUq1/te9LAnru/lIP5lhf+806HfO/7OziVqL3YpzMvul:qKI1efww8lHrvYp4vC
Malware Config
Signatures
Files
-
f9ff68be545ba90566673b25f2433e05b36eedab27d82c50e4293002e6acd3b9.exe windows x86
37e538e3e9720c50aa59a4c9ff96b4fd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord696
MethCallEngine
ord516
ord628
ord665
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ord608
ord717
ProcCallEngine
ord644
ord537
ord100
ord581
Sections
.text Size: 84KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ