Static task
static1
Behavioral task
behavioral1
Sample
ecc50a58142aa50f0e444ccb698d8ede87727903a2729da49254c413e4438a34.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ecc50a58142aa50f0e444ccb698d8ede87727903a2729da49254c413e4438a34.exe
Resource
win10v2004-20220901-en
General
-
Target
ecc50a58142aa50f0e444ccb698d8ede87727903a2729da49254c413e4438a34
-
Size
188KB
-
MD5
a06913669af9ea181690b13f704df8c8
-
SHA1
dc091627338b1650b271f08e3c88e8d463434468
-
SHA256
ecc50a58142aa50f0e444ccb698d8ede87727903a2729da49254c413e4438a34
-
SHA512
29c2571a119d2ca928265ff5e324535f2ccdea19d99bdfefe3ebfda58d59df35a1eabd5a418b9226047e2c7cdf9a63498a742dc236bbc5b0d504d290485f87d3
-
SSDEEP
3072:qeDt1SrQb8TD23JEiRkIi9hHleXrRUiDRk0jTrOCqy5:qeXAOeiRvobURUiDRLj
Malware Config
Signatures
Files
-
ecc50a58142aa50f0e444ccb698d8ede87727903a2729da49254c413e4438a34.exe windows x86
9b292186c5ed8c30d32ec023e39bfa81
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord595
ord598
ord631
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord713
ord717
ProcCallEngine
ord644
ord537
ord578
ord100
ord616
ord581
Sections
.text Size: 84KB - Virtual size: 83KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.y71X Size: 96KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE