Static task
static1
Behavioral task
behavioral1
Sample
749fcbd0f44a7fe745fe479d457e3d7fa3c2c4a1560870aeb6332a8305171990.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
749fcbd0f44a7fe745fe479d457e3d7fa3c2c4a1560870aeb6332a8305171990.exe
Resource
win10v2004-20220812-en
General
-
Target
749fcbd0f44a7fe745fe479d457e3d7fa3c2c4a1560870aeb6332a8305171990
-
Size
24KB
-
MD5
6da1ee47653cb1ee611f878d2c8e2e16
-
SHA1
380f67918ddb379427fa458b1bad4d942ff77d77
-
SHA256
749fcbd0f44a7fe745fe479d457e3d7fa3c2c4a1560870aeb6332a8305171990
-
SHA512
8f149f87aae8686578e33e82c76cb006a0c9d1b03b51ed07cc3c3ee604ad357d1549b6a099920fe51ec886694f2a80a36ab461e51e9af4e80f4ed5a5f2b8576d
-
SSDEEP
384:xTUjnbYs/Ujp+Dv1v1VBwETUfBw52YOHIncSK3MMxLM/PKbJYVKjIqEu963nlQ/I:xTUjcpU11VBbTUpw5rJYaj
Malware Config
Signatures
Files
-
749fcbd0f44a7fe745fe479d457e3d7fa3c2c4a1560870aeb6332a8305171990.exe windows x86
d600aaaecd36ae29878ccf39f559d7f4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
msvbvm60
MethCallEngine
ord516
ord631
ord709
ord526
EVENT_SINK_AddRef
DllFunctionCall
ord563
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord713
ord606
ord608
ord717
ProcCallEngine
ord644
ord537
ord570
ord685
ord100
ord616
ord581
Sections
.text Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fuck Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ