Static task
static1
Behavioral task
behavioral1
Sample
bb213f6921f39d68b87074fa64e983614033b3d5e64394b44666edbca778be8f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bb213f6921f39d68b87074fa64e983614033b3d5e64394b44666edbca778be8f.exe
Resource
win10v2004-20220812-en
General
-
Target
bb213f6921f39d68b87074fa64e983614033b3d5e64394b44666edbca778be8f
-
Size
208KB
-
MD5
a232b21007da1d6a8f5d0f37710c934c
-
SHA1
3aec05719ddc633d6111e6f9f8b1c2162bb145b9
-
SHA256
bb213f6921f39d68b87074fa64e983614033b3d5e64394b44666edbca778be8f
-
SHA512
16bd93f263b9814555fe7e14d986dd46157ecf04ef400296eaba75b44d7182887f154566a5b745b70f5fbcff29b4a1491dddbae6dd19dda41d8690fe1457c4e8
-
SSDEEP
1536:OvdH3UyOEGYfo8z2wW4cd9Lv2PElgW/uNoN274B/K51UtaHElfTczpqVar1/AgAD:iUxSo8yzp+quNoN2I0jASI4W
Malware Config
Signatures
Files
-
bb213f6921f39d68b87074fa64e983614033b3d5e64394b44666edbca778be8f.exe windows x86
b1056c90aef8f53531198a7b4faafb51
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord187
MethCallEngine
ord516
ord517
ord518
ord519
ord660
ord669
ord595
ord598
ord520
ord709
ord631
ord632
ord526
EVENT_SINK_AddRef
ord527
ord528
ord561
DllFunctionCall
ord564
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord608
ord717
ProcCallEngine
ord535
ord537
ord644
ord645
ord570
ord573
ord681
ord575
ord578
ord100
ord579
ord689
ord616
ord617
ord618
ord619
ord650
ord581
Sections
.text Size: 188KB - Virtual size: 185KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ