Static task
static1
Behavioral task
behavioral1
Sample
36956b498eb49158fd17d79d4189f390de53c9dd436718d2bf4a19b1b7e8c9e9.exe
Resource
win7-20220812-en
General
-
Target
36956b498eb49158fd17d79d4189f390de53c9dd436718d2bf4a19b1b7e8c9e9
-
Size
336KB
-
MD5
606b0073d4a189e7926fd895e5563112
-
SHA1
197fe6cc94ae2198e81880fe5cb769f4b52970d8
-
SHA256
36956b498eb49158fd17d79d4189f390de53c9dd436718d2bf4a19b1b7e8c9e9
-
SHA512
efdd31993912c8aff490e060c95d09cbad6312d6aa24f4926277ae08c300884e9d0adbec437d3c55e6caa8462d5bafe29e6c32b66b0cfb02979adc00dbcdfb6b
-
SSDEEP
3072:DUX0e1FB/DpKjCLHAmXibyp3a0sGAwBlW7Ra/o6IB1KuQlk3AZM/0:DTc3aVwY6IBguQlk3AZu0
Malware Config
Signatures
Files
-
36956b498eb49158fd17d79d4189f390de53c9dd436718d2bf4a19b1b7e8c9e9.exe windows x86
a4d18b246d8dd2d8a4fc6b2b8dc9b18f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord696
MethCallEngine
ord516
ord628
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ord608
ord717
ProcCallEngine
ord537
ord644
ord100
Sections
.text Size: 240KB - Virtual size: 240KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE