Static task
static1
Behavioral task
behavioral1
Sample
567e0d50c4da1225d9512eae64286df27ea180081f6f3a48c8ef861db9ce7e73.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
567e0d50c4da1225d9512eae64286df27ea180081f6f3a48c8ef861db9ce7e73.exe
Resource
win10v2004-20220812-en
General
-
Target
567e0d50c4da1225d9512eae64286df27ea180081f6f3a48c8ef861db9ce7e73
-
Size
196KB
-
MD5
611e2a808f54ea75760c59d4fa414570
-
SHA1
100d74711ce6560347f37106ef9aa07c23914dbf
-
SHA256
567e0d50c4da1225d9512eae64286df27ea180081f6f3a48c8ef861db9ce7e73
-
SHA512
637d234227c059ecff96a059950a7e84a02b12269dca8f26472c25cd97b584f6146e8ff1638d8107e7246b0b2f678415be37ab2b9d184d462975f12835e83696
-
SSDEEP
1536:OUaDbmpjK86rbrADTIXJzS+lfSBQk2WXhMdkR6NJvCXvPTE/txDDdi1+H:Ss44IXcYfSiKPP1+H
Malware Config
Signatures
Files
-
567e0d50c4da1225d9512eae64286df27ea180081f6f3a48c8ef861db9ce7e73.exe windows x86
c4ae2eae1a4c3b13172e8fb9f0ad1729
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord582
ord583
ord584
ord516
ord593
ord594
ord595
ord520
ord632
EVENT_SINK_AddRef
ord561
DllFunctionCall
ord670
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ProcCallEngine
ord535
ord644
Zombie_AddRef
ord573
ord575
ord100
ord616
ord617
ord581
Sections
.text Size: 156KB - Virtual size: 153KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ypmndfh Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE