Static task
static1
Behavioral task
behavioral1
Sample
cabb5c82e0136e708228625ad1460293dc8053335bdce37ec1f1db0bdf184b12.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cabb5c82e0136e708228625ad1460293dc8053335bdce37ec1f1db0bdf184b12.exe
Resource
win10v2004-20220812-en
General
-
Target
cabb5c82e0136e708228625ad1460293dc8053335bdce37ec1f1db0bdf184b12
-
Size
118KB
-
MD5
6fd784f32eba8730b56bff9ac6f0cc70
-
SHA1
31ce51cb1cb0288a71555852c223f55379fc956a
-
SHA256
cabb5c82e0136e708228625ad1460293dc8053335bdce37ec1f1db0bdf184b12
-
SHA512
3ae306e9ed9b88bb4dde913c0533c22caa11cec8f9e46594b19e88002a6b05141d6d74c70e9ffb34e1b39be629684983bd1fdc18ca3f1d35cac3617aeee3fcb5
-
SSDEEP
1536:15qdmlC50vFL1LuZ+RylbGfR9TQ2g8cifaxKwld3DkE2KVONMHgrbtCOd/6SE/q:NvFL1L8Q7f3ixzzBHgrbtCO4SE/q
Malware Config
Signatures
Files
-
cabb5c82e0136e708228625ad1460293dc8053335bdce37ec1f1db0bdf184b12.exe windows x86
1ba999fa2f9c9f5aecde18dc985429fa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord183
ord582
ord586
ord589
ord697
ord698
MethCallEngine
ord519
ord598
ord631
ord709
ord632
ord526
EVENT_SINK_AddRef
ord527
ord563
ord678
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord537
ord644
ord647
ord570
ord681
ord100
ord616
ord432
Sections
.text Size: 98KB - Virtual size: 98KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ