Static task
static1
Behavioral task
behavioral1
Sample
b1a694071f7be5cebe537dcfa611bb185f6edc332d277004661e6daef3c444b8.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b1a694071f7be5cebe537dcfa611bb185f6edc332d277004661e6daef3c444b8.exe
Resource
win10v2004-20220812-en
General
-
Target
b1a694071f7be5cebe537dcfa611bb185f6edc332d277004661e6daef3c444b8
-
Size
64KB
-
MD5
92ac3d63c3062a8d8bb10eeb7bdd2730
-
SHA1
27206f760e507aa70482da556c6e0c63d0203cae
-
SHA256
b1a694071f7be5cebe537dcfa611bb185f6edc332d277004661e6daef3c444b8
-
SHA512
dcbc6445f660a84814ae7bc3071c0dc528b6c6f49543acf8712b684f842c84b51a1a55c016dde33272474a810426f5eaceeeb18a29cf96d39f45e1553d247f1e
-
SSDEEP
768:QEh04EpnIPz8v96hkbObBcP0ocEnaLj8+IBfCylsCclAYbmyX2:QG044I78v96nEnaLj8bh+ly
Malware Config
Signatures
Files
-
b1a694071f7be5cebe537dcfa611bb185f6edc332d277004661e6daef3c444b8.exe windows x86
3c342e237e3474096f70f4b76f597be5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ContinueDebugEvent
msvbvm60
ord183
ord697
ord698
MethCallEngine
ord598
ord520
ord522
ord709
ord631
ord632
ord526
EVENT_SINK_AddRef
ord527
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord606
ord608
ord717
ProcCallEngine
ord644
ord537
ord647
ord570
ord573
ord681
ord100
ord616
ord544
Sections
.text Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ