Static task
static1
Behavioral task
behavioral1
Sample
1b1204346311739d709ff57ee1cf042ae14ccaf42aea37d8840c51f56a215496.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1b1204346311739d709ff57ee1cf042ae14ccaf42aea37d8840c51f56a215496.exe
Resource
win10v2004-20220812-en
General
-
Target
1b1204346311739d709ff57ee1cf042ae14ccaf42aea37d8840c51f56a215496
-
Size
40KB
-
MD5
4d2fb084210c1955575edeacbf735940
-
SHA1
bf78ae1e0f34ccf4ae770b0a2cf9a8d4f445f65f
-
SHA256
1b1204346311739d709ff57ee1cf042ae14ccaf42aea37d8840c51f56a215496
-
SHA512
fcda679e77bc4c344cfc35c18819de74b932756faa6a8b069cd9a8120f9484bd2bd1902be0a88f4a14b7a091b90a9765b6032a72a729bda9e9067fdbf36a1fee
-
SSDEEP
384:RvmB4F5UNQXH3RVg9lPZ5Hqh25zLVPhw52W13UHiyUU7Bdl7NMkPoPdMPrGjIs5p:jN33Dg9lPvq4N9K5R1GJBgPWPkqdic6
Malware Config
Signatures
Files
-
1b1204346311739d709ff57ee1cf042ae14ccaf42aea37d8840c51f56a215496.exe windows x86
c7f03f9ea0bf470ba966a812e0699a84
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord518
ord666
ord593
ord598
ord520
ord632
ord526
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord716
ord531
ord717
ProcCallEngine
ord645
ord648
ord681
ord578
ord100
ord579
ord617
ord619
ord580
ord581
Sections
.text Size: 32KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ