Static task
static1
Behavioral task
behavioral1
Sample
d6b2485b795173ee2561c10eda5f33f67608eccf29ad3cbe6f04b41ec5e79f49.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d6b2485b795173ee2561c10eda5f33f67608eccf29ad3cbe6f04b41ec5e79f49.exe
Resource
win10v2004-20220812-en
General
-
Target
d6b2485b795173ee2561c10eda5f33f67608eccf29ad3cbe6f04b41ec5e79f49
-
Size
36KB
-
MD5
48b0d4f32a032b62338bdb8c68cf042f
-
SHA1
cae1739f87ee419479e428cc8f75d52b5bc55253
-
SHA256
d6b2485b795173ee2561c10eda5f33f67608eccf29ad3cbe6f04b41ec5e79f49
-
SHA512
f0643940d4f248874a5206bc19244a372cc3248d6a00d8136b258334d7c3bbbe170755529f41d4cd7f3685f28e2cbf15df59f764b945751b2c2121c546c0bcd9
-
SSDEEP
384:mvXHi3Qqkc1LN3EFv0Yh1oZZNb2B8jmBAtAZ5PN7A3CrTCwf1q00ZAU/Jw6sNRmL:3hNUFv0Yh1mpcmA97A3CrTCweNw61vU
Malware Config
Signatures
Files
-
d6b2485b795173ee2561c10eda5f33f67608eccf29ad3cbe6f04b41ec5e79f49.exe windows x86
d1f8406116644196a1010c364025b6d1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord516
ord517
ord666
ord593
ord594
ord598
ord631
ord525
ord632
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord531
ord716
ProcCallEngine
ord537
ord648
ord681
ord100
ord616
ord618
ord619
ord581
Sections
.text Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ