Static task
static1
Behavioral task
behavioral1
Sample
0cea4df1c6b191e59624607af451aee5de91b92a72f02d4178fd8df80211550f.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
0cea4df1c6b191e59624607af451aee5de91b92a72f02d4178fd8df80211550f.exe
Resource
win10v2004-20220812-en
General
-
Target
0cea4df1c6b191e59624607af451aee5de91b92a72f02d4178fd8df80211550f
-
Size
156KB
-
MD5
0d70d98812b5d801e383f523b1e84be0
-
SHA1
20fe678b572a6bfb8db515f4bbb0a4a030ecea34
-
SHA256
0cea4df1c6b191e59624607af451aee5de91b92a72f02d4178fd8df80211550f
-
SHA512
cdb28e0ec39dc1666df79456a706e7ab561a6150fb6dbcf4947bd75221031f48b4dc983f5ccf80b596f90853ef0ff776dbb958cfb00d13d4c6db873ab388c02f
-
SSDEEP
1536:bfNVdwhYtyE6Z0ai2CvccOHkvGeSysd8W2fk3H:7twOW0ai2Cvccr+zU
Malware Config
Signatures
Files
-
0cea4df1c6b191e59624607af451aee5de91b92a72f02d4178fd8df80211550f.exe windows x86
6ae05f44a222e4e752dd01aa7cbbe3aa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord582
ord690
ord583
ord691
ord584
ord693
ord695
ord696
ord589
ord697
MethCallEngine
ord514
ord518
ord629
ord554
ord661
ord662
ord555
ord556
ord664
ord558
ord559
ord592
ord593
ord595
ord702
ord703
ord598
ord704
ord709
ord525
ord633
ord526
EVENT_SINK_AddRef
ord634
ord528
ord529
ord560
ord561
ord562
DllFunctionCall
ord564
ord671
ord672
ord673
ord675
ord568
ord569
ord676
ord678
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord714
ord530
ord608
ord716
ord533
ord534
ProcCallEngine
ord643
ord537
ord645
ord538
ord646
ord647
ord648
ord571
ord649
ord572
ord680
ord685
ord578
ord100
ord610
ord613
ord614
ord615
ord616
ord540
ord619
ord542
ord545
ord547
ord655
ord658
ord581
Sections
.text Size: 116KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
oihpika Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE