Static task
static1
Behavioral task
behavioral1
Sample
442f06a908fb6b9adeb4167783fc0987c056118f6816320387aeef899d8561db.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
442f06a908fb6b9adeb4167783fc0987c056118f6816320387aeef899d8561db.exe
Resource
win10v2004-20220901-en
General
-
Target
442f06a908fb6b9adeb4167783fc0987c056118f6816320387aeef899d8561db
-
Size
36KB
-
MD5
56c4d1617845f3b1bd290fb6f5a9cf10
-
SHA1
1905c517938f9b1cdb9bc3ee10a0581a961dfab3
-
SHA256
442f06a908fb6b9adeb4167783fc0987c056118f6816320387aeef899d8561db
-
SHA512
b654648bd566ea1d510c6146df9ee7cc88ed417b03e3f0e26fc9a0740a838c3d6b7b8ea496e3deb7a1b4b2298a6d3621f7631766ab775835c4ffbec1e532d7c5
-
SSDEEP
384:4bnoA9cqKpMQL2Htp3vRSQtAFPU/sYGwBZDK:VEi2Htp3vke4UkFwbK
Malware Config
Signatures
Files
-
442f06a908fb6b9adeb4167783fc0987c056118f6816320387aeef899d8561db.exe windows x86
b553f98a8a6dd0cb683148589278a101
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord593
ord594
ord598
ord525
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord644
ord570
ord100
ord617
Sections
.text Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ias Size: 12KB - Virtual size: 4KB