Static task
static1
Behavioral task
behavioral1
Sample
c0a411d437f1e52a783d6bc804c75e4f66a92e9eb4f688fc7a4113ba63853393.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c0a411d437f1e52a783d6bc804c75e4f66a92e9eb4f688fc7a4113ba63853393.exe
Resource
win10v2004-20220812-en
General
-
Target
c0a411d437f1e52a783d6bc804c75e4f66a92e9eb4f688fc7a4113ba63853393
-
Size
252KB
-
MD5
910c990a7004d7df4eac9c31c8be5050
-
SHA1
a8c62b86bf6e4435f5a6cbe1edef47ba73e72485
-
SHA256
c0a411d437f1e52a783d6bc804c75e4f66a92e9eb4f688fc7a4113ba63853393
-
SHA512
eec0418dc7580aa19559a1a0805e6f7de976b3bd2fe62277033d7e45808b39012b83729235f057ab2223dc53a74d37a7d51302540bbace144e04026b5c721c0e
-
SSDEEP
3072:EeDt1SrQb8TD23JEiRkIi9hHleXrRUiDRk0jTrOCqy5GUit4cC:EeXAOeiRvobURUiDRLjTcC
Malware Config
Signatures
Files
-
c0a411d437f1e52a783d6bc804c75e4f66a92e9eb4f688fc7a4113ba63853393.exe windows x86
9b292186c5ed8c30d32ec023e39bfa81
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord595
ord598
ord631
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord713
ord717
ProcCallEngine
ord644
ord537
ord578
ord100
ord616
ord581
Sections
.text Size: 84KB - Virtual size: 83KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.y71X Size: 124KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
spygifn Size: 36KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE