Static task
static1
Behavioral task
behavioral1
Sample
5ef94e3efa949cf74a1a75774bdc6a2fef90c40faa142a5950d394bcee581bcf.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5ef94e3efa949cf74a1a75774bdc6a2fef90c40faa142a5950d394bcee581bcf.exe
Resource
win10v2004-20220812-en
General
-
Target
5ef94e3efa949cf74a1a75774bdc6a2fef90c40faa142a5950d394bcee581bcf
-
Size
66KB
-
MD5
4345f3adc8e378576be6b6d8d003f410
-
SHA1
8ffb1b68019df8326e871fe9fb95a96a78662100
-
SHA256
5ef94e3efa949cf74a1a75774bdc6a2fef90c40faa142a5950d394bcee581bcf
-
SHA512
65591e327378d8ee06afd07004f538c2a2a8db4854ed632ea6540aa1ef2311010ce0df20fdddea40d6db68448aa423cdb2c6584e34b1a3dce854b7c185217f14
-
SSDEEP
1536:sr+FuWJwPuoXarwewznXMcpm/zOxJXKJQ:sr+FuyEzq/sXMcI/AKJQ
Malware Config
Signatures
Files
-
5ef94e3efa949cf74a1a75774bdc6a2fef90c40faa142a5950d394bcee581bcf.exe windows x86
b1332fc8454ed69bea840c0dc3a3695f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord660
ord666
ord598
ord709
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ord607
ord608
ord531
ord645
ord570
ord576
ord100
ord617
ord619
ord546
ord580
Sections
.text Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ