Static task
static1
Behavioral task
behavioral1
Sample
70e41549b51d034f2954b742d7d43389687d6e83e36c071fa0add4d6a99e37e7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
70e41549b51d034f2954b742d7d43389687d6e83e36c071fa0add4d6a99e37e7.exe
Resource
win10v2004-20220812-en
General
-
Target
70e41549b51d034f2954b742d7d43389687d6e83e36c071fa0add4d6a99e37e7
-
Size
140KB
-
MD5
64055157687c48a7b1e832736e219535
-
SHA1
93ea41ff89eac48638413fc6de8191bc583f8aee
-
SHA256
70e41549b51d034f2954b742d7d43389687d6e83e36c071fa0add4d6a99e37e7
-
SHA512
330858bca2e5d54bcd57916d61c90ab6860e52bf1129aa6b759befecb9d419e76fc6f95a0a3fae940b44f9945c6365d1cbeb94cc3c01fd9a8df2b8b5fa0190d0
-
SSDEEP
1536:WlmVp5BUhl3jGAaL3Lpk2Df9xF9wB9b9pQ:Wlmz5BQl3jGAaLdkMf9xFaM
Malware Config
Signatures
Files
-
70e41549b51d034f2954b742d7d43389687d6e83e36c071fa0add4d6a99e37e7.exe windows x86
04c5080ad9705ae8bfe8f9c29a83a8eb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord588
MethCallEngine
ord621
ord516
ord517
ord518
ord593
ord595
ord598
ord520
ord523
ord709
ord631
ord525
ord632
ord526
EVENT_SINK_AddRef
ord527
ord528
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord606
ord713
ord607
ord608
ord717
ord534
ProcCallEngine
ord535
ord644
ord645
ord648
ord570
ord571
ord685
ord100
ord579
ord613
ord616
ord617
ord618
ord619
ord580
ord581
Sections
.text Size: 132KB - Virtual size: 130KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ