Static task
static1
Behavioral task
behavioral1
Sample
817985aa34f18d744194674e83671e017ac12b2748a845cb108ebf44c9c83cb6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
817985aa34f18d744194674e83671e017ac12b2748a845cb108ebf44c9c83cb6.exe
Resource
win10v2004-20220812-en
General
-
Target
817985aa34f18d744194674e83671e017ac12b2748a845cb108ebf44c9c83cb6
-
Size
32KB
-
MD5
0cf186ae4d62ed5840b5d2e7702d9c10
-
SHA1
ebb98e13799566345f8947f6c152a2295dbae54c
-
SHA256
817985aa34f18d744194674e83671e017ac12b2748a845cb108ebf44c9c83cb6
-
SHA512
7f1420ac0fb953b0da90a4a1256664bfc19d7c38b638aef209b69735ebb37de3356e274fa5fb94c9ac64b435cd0c7dbe976fb2e8f1ece422cf8e632579506b60
-
SSDEEP
384:2jpH+ET8zcr9asdFgNplptFAHIFgjpH+ET8zcr9:2dLAgpddC5ptWHygdLAgp
Malware Config
Signatures
Files
-
817985aa34f18d744194674e83671e017ac12b2748a845cb108ebf44c9c83cb6.exe windows x86
db8f1afd34310e6b12279f332a382d8b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord300
ord595
ord306
EVENT_SINK_AddRef
DllFunctionCall
ord670
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord716
ProcCallEngine
ord100
Sections
.text Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ