Static task
static1
Behavioral task
behavioral1
Sample
b90e994101fe338e4f784cad3b20b29dc2e55f0fc62319ca2c73a4e72351ba0f.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b90e994101fe338e4f784cad3b20b29dc2e55f0fc62319ca2c73a4e72351ba0f.exe
Resource
win10v2004-20220812-en
General
-
Target
b90e994101fe338e4f784cad3b20b29dc2e55f0fc62319ca2c73a4e72351ba0f
-
Size
164KB
-
MD5
564963054ab8212a3d50a861fd29f0be
-
SHA1
501845faf03e9e166183fe001fbfcd96e23eefe8
-
SHA256
b90e994101fe338e4f784cad3b20b29dc2e55f0fc62319ca2c73a4e72351ba0f
-
SHA512
fbe07d9db65ea2b0a9de1dcdb93df9d2a3ed6500cc7261ceb1928ff8830e6db2580262e2cd8d90c962ddaa16ba84c18375a28c1e5c72a76a34cf6caf686741f8
-
SSDEEP
1536:JQ+ZUQVtmgrxiI+nDcpeutFHJUciUKqTho7a2pt7tPbY1jhYIWjyyaZjNwJdn:JVOQVtJaDX6Vhapt7ADyn
Malware Config
Signatures
Files
-
b90e994101fe338e4f784cad3b20b29dc2e55f0fc62319ca2c73a4e72351ba0f.exe windows x86
61226973a55bf5c4f53b6ea0ac64ccbf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord582
ord583
ord584
ord516
ord660
ord593
ord594
ord595
ord520
ord632
EVENT_SINK_AddRef
ord561
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ProcCallEngine
ord535
ord644
Zombie_AddRef
ord573
ord681
ord575
ord100
ord546
ord581
Sections
.text Size: 148KB - Virtual size: 147KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.0data Size: 2KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE