Static task
static1
Behavioral task
behavioral1
Sample
9c5b7cef49fd808078e3fa87ed3cda6c3fb2e238c23d78c4f63652a6cc4f8399.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9c5b7cef49fd808078e3fa87ed3cda6c3fb2e238c23d78c4f63652a6cc4f8399.exe
Resource
win10v2004-20220812-en
General
-
Target
9c5b7cef49fd808078e3fa87ed3cda6c3fb2e238c23d78c4f63652a6cc4f8399
-
Size
480KB
-
MD5
53e4a90ef8c7761f8978a232cdffee40
-
SHA1
f6fdb71c1c09a4859414d7a3399d8ce96e125522
-
SHA256
9c5b7cef49fd808078e3fa87ed3cda6c3fb2e238c23d78c4f63652a6cc4f8399
-
SHA512
dac696bd03d42443a9dbc8fea88da7388d25fa2d24dc725d3fdad0115efc9cbe526b543bc5c7543e78e7d257cbd29e469a4033abde499fbb4925653565449774
-
SSDEEP
6144:ee/221+6dEaZyTus7VKnxYXYiXeTGInqdD:pj1vdlymSuS
Malware Config
Signatures
Files
-
9c5b7cef49fd808078e3fa87ed3cda6c3fb2e238c23d78c4f63652a6cc4f8399.exe windows x86
57aec85b8994baa395f873f824332fb0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RtlMoveMemory
msvbvm60
MethCallEngine
ord516
ord631
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord608
ProcCallEngine
ord644
ord100
ord616
Sections
.text Size: 256KB - Virtual size: 256KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 220KB - Virtual size: 248KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE