Static task
static1
Behavioral task
behavioral1
Sample
831aad3eb80b0b6afd029ec7b69805a6f3bc06bbe0e91bdae923f7723fe12853.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
831aad3eb80b0b6afd029ec7b69805a6f3bc06bbe0e91bdae923f7723fe12853.exe
Resource
win10v2004-20220812-en
General
-
Target
831aad3eb80b0b6afd029ec7b69805a6f3bc06bbe0e91bdae923f7723fe12853
-
Size
633KB
-
MD5
a1bb74535fe78c5a6ed1f4aea0ddc5a9
-
SHA1
3d1d928c2d09614fc7c4a5a1796bdfd5c899f728
-
SHA256
831aad3eb80b0b6afd029ec7b69805a6f3bc06bbe0e91bdae923f7723fe12853
-
SHA512
f7d800054e99ee95ac919bf5eed381d7765cccfe38860a75c34fdd80717308c5d2b6eac3e6db49eaba2633705eb37829df7a312def104950623a5af5ab6c3162
-
SSDEEP
3072:3sJlOGa8bJl3VsyJynjivjZ78FYpv5VO5VKjl5PjPjPjPjPjPjwlwj7AE2tL:387jAju1QYhOwl5777777iUAEQ
Malware Config
Signatures
Files
-
831aad3eb80b0b6afd029ec7b69805a6f3bc06bbe0e91bdae923f7723fe12853.exe windows x86
dc5ed6518320616a5bda1f08462ba9b5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord626
ord598
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord716
ProcCallEngine
ord537
ord645
ord570
ord571
ord576
ord100
ord617
ord619
Sections
.text Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 314KB - Virtual size: 316KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rerjrtq Size: 32KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zxjflvl Size: 32KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
drbsbnk Size: 32KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
gqzgblt Size: 157KB - Virtual size: 160KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE