Static task
static1
Behavioral task
behavioral1
Sample
cdf9aef65020a97f53a59526dd0e57a56332f5b97253ea3507338d88d02f1b79.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cdf9aef65020a97f53a59526dd0e57a56332f5b97253ea3507338d88d02f1b79.exe
Resource
win10v2004-20220901-en
General
-
Target
cdf9aef65020a97f53a59526dd0e57a56332f5b97253ea3507338d88d02f1b79
-
Size
102KB
-
MD5
6b3715ed7021725f33bd4e1b5fa426c0
-
SHA1
1ebf37aa9494366e501315360d6805b20fa5eda2
-
SHA256
cdf9aef65020a97f53a59526dd0e57a56332f5b97253ea3507338d88d02f1b79
-
SHA512
25c72f5b5ec3e2730fa82f324d4ce29a0fbe058dcb985189f00cc2a15269dfca2dc47d9f7132c0028fe1999e4e6b63838fc05debc7064fa990787eed2300074f
-
SSDEEP
1536:O6shRgUZ1q0VbKmy2rqE/+nZ7YafblXsKdabfoBQNRtL:y/VbKmnrT2Z7YafblXsKda0e
Malware Config
Signatures
Files
-
cdf9aef65020a97f53a59526dd0e57a56332f5b97253ea3507338d88d02f1b79.exe windows x86
cdeade61ae62dc2d0566a615eb2e0683
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetProcessWindowStation
msvbvm60
ord183
ord696
ord698
MethCallEngine
ord516
ord519
ord557
ord598
ord709
ord632
ord526
EVENT_SINK_AddRef
ord527
ord563
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ord608
ord717
ProcCallEngine
ord537
ord644
ord647
ord570
ord573
ord681
ord100
ord616
ord432
ord617
Sections
.text Size: 97KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ