Static task
static1
Behavioral task
behavioral1
Sample
a9ffe6559c887c98d9484638e669ade5996b2a4961e6192c9291595fe4f70dfe.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a9ffe6559c887c98d9484638e669ade5996b2a4961e6192c9291595fe4f70dfe.exe
Resource
win10v2004-20220812-en
General
-
Target
a9ffe6559c887c98d9484638e669ade5996b2a4961e6192c9291595fe4f70dfe
-
Size
164KB
-
MD5
912f53eb00029fc268c5ca27823503da
-
SHA1
c5758fd3ac38f176bcbe4a597fce28916105605e
-
SHA256
a9ffe6559c887c98d9484638e669ade5996b2a4961e6192c9291595fe4f70dfe
-
SHA512
c8a395861d22e83f82df23eae4f0c36d8f85395d5912c729cc4faf9728e363b2c3b5895bab7f1220d79d1afa917d014a9d81cf24d37096900670d6207c70a42b
-
SSDEEP
3072:p9m5PDykjCBx2hypK7D6zdX3+P+kdMTGtpfZv+H:F
Malware Config
Signatures
Files
-
a9ffe6559c887c98d9484638e669ade5996b2a4961e6192c9291595fe4f70dfe.exe windows x86
ad98994dbaf986343b0bf594c7304372
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord696
MethCallEngine
ord516
ord628
ord595
ord631
ord632
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord606
ord713
ord716
ProcCallEngine
ord537
ord644
ord645
ord648
ord572
ord573
ord578
ord100
ord617
ord650
Sections
.text Size: 156KB - Virtual size: 155KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ