Static task
static1
Behavioral task
behavioral1
Sample
5252adad95a49839543ff3fbcdda9214a92d570ccb7be96c22745a67154d69a4.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
5252adad95a49839543ff3fbcdda9214a92d570ccb7be96c22745a67154d69a4.exe
Resource
win10v2004-20220812-en
General
-
Target
5252adad95a49839543ff3fbcdda9214a92d570ccb7be96c22745a67154d69a4
-
Size
36KB
-
MD5
325d992255f7fdfb66174baeeb6ddd6e
-
SHA1
3ba755b6c2152cb6bc8ace69ef65b5c9c4fc82bc
-
SHA256
5252adad95a49839543ff3fbcdda9214a92d570ccb7be96c22745a67154d69a4
-
SHA512
0b86be7b602346377f88526ef1d578a43e97f0b22fc8557db238941f3a3f1d555a0b030d250e9312653bd5f13922ad8cffdd7c7149665ba3fed49193a0be3ad3
-
SSDEEP
384:siHHXP+IldroIln+Zs0AqhNg3PV2+h3MczGKnoBs:siHXP+IldcIlIsyhNg3cW3VnoB
Malware Config
Signatures
Files
-
5252adad95a49839543ff3fbcdda9214a92d570ccb7be96c22745a67154d69a4.exe windows x86
fce403af225b507d06eeefe848e56621
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord595
ord598
ord631
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord607
ord717
ProcCallEngine
ord537
ord644
ord570
ord573
ord685
ord100
ord616
ord619
Sections
.TEXT Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.DATA Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RSRC Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ