Static task
static1
Behavioral task
behavioral1
Sample
5bf1811c8e57bd12782f57caaf933bff0260ceb8f9e3a921c3d1d799cd6dce37.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5bf1811c8e57bd12782f57caaf933bff0260ceb8f9e3a921c3d1d799cd6dce37.exe
Resource
win10v2004-20220812-en
General
-
Target
5bf1811c8e57bd12782f57caaf933bff0260ceb8f9e3a921c3d1d799cd6dce37
-
Size
119KB
-
MD5
490181a94629d85e6f760bf2034602d0
-
SHA1
008dd0a069071c657a5fe7306c18f60fe952eb70
-
SHA256
5bf1811c8e57bd12782f57caaf933bff0260ceb8f9e3a921c3d1d799cd6dce37
-
SHA512
37f0c24ae9743d833893e3aff8d11cb3d8a7c1d03f1457732f50d5d6620a35d0297530d71e227cae49a0650c57a2c60b6542f6e09c900acdff79caf8afaede41
-
SSDEEP
3072:9ernxPhBPWC64LiRZ801/RLPp0Sax/7Zjo6/5oAt:WBPWC64m/8GRbp0Dtjoe5ou
Malware Config
Signatures
Files
-
5bf1811c8e57bd12782f57caaf933bff0260ceb8f9e3a921c3d1d799cd6dce37.exe windows x86
2daa5683a9200f6faeb18cc98cb38ddc
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord586
MethCallEngine
ord513
ord515
ord558
ord669
ord702
ord598
ord630
ord524
EVENT_SINK_AddRef
ord560
ord670
ord677
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord319
ProcCallEngine
ord644
ord649
ord100
ord613
ord542
Sections
.text Size: 101KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 384B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ