Static task
static1
Behavioral task
behavioral1
Sample
052fc1af20a2857ef06b69191da970d9a220202d318237d049bebe435d4db669.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
052fc1af20a2857ef06b69191da970d9a220202d318237d049bebe435d4db669.exe
Resource
win10v2004-20220901-en
General
-
Target
052fc1af20a2857ef06b69191da970d9a220202d318237d049bebe435d4db669
-
Size
52KB
-
MD5
6d008d238ef99300e2afe2c9a55cef2c
-
SHA1
29a9ec2e9855a395a5dbd6c060b6a6ad2d368662
-
SHA256
052fc1af20a2857ef06b69191da970d9a220202d318237d049bebe435d4db669
-
SHA512
ddc31c6b20f43856fedcd8ebddca3c056cf64ec844b472542f337019e952efe5097ab4d30d6874dec37f7a12f6944ea89d7c27f37034ad054b8c6664a0102785
-
SSDEEP
768:tfTXXBiwYcMvLvm3xX8TMaa3b1rIqwd4Q92oDR7JUuc:tbXS/zm3xXpwc
Malware Config
Signatures
Files
-
052fc1af20a2857ef06b69191da970d9a220202d318237d049bebe435d4db669.exe windows x86
580b207a07dcf65753389899fc319095
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord516
ord519
ord595
ord598
ord520
ord631
ord632
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord606
ord607
ord608
ord717
ProcCallEngine
ord537
ord647
ord572
ord573
ord681
ord100
ord612
ord616
ord617
ord619
ord546
ord581
Sections
.text Size: 44KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ