Static task
static1
Behavioral task
behavioral1
Sample
f41fbcd279966db8997a6bd3ada4c81ca2b2cc86e49df0feb57cb534cbfb17b3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f41fbcd279966db8997a6bd3ada4c81ca2b2cc86e49df0feb57cb534cbfb17b3.exe
Resource
win10v2004-20220901-en
General
-
Target
f41fbcd279966db8997a6bd3ada4c81ca2b2cc86e49df0feb57cb534cbfb17b3
-
Size
88KB
-
MD5
9d57cc85c7aa25f635fba99990d5d8a0
-
SHA1
f8de282ffa92134a0e7e821d7b415c28b1bb831b
-
SHA256
f41fbcd279966db8997a6bd3ada4c81ca2b2cc86e49df0feb57cb534cbfb17b3
-
SHA512
49689b6d32bc644e490a04b922fdd6233d9e1ad7305d60f4111fb22a7882f34811b3480552050bb1839cac9a307e65fe9ff7140ff26ec32d1c4478cd40bffaeb
-
SSDEEP
1536:ipVpOwIEoyG3iEoWTb4cQHNAVyLW97P5:iFOr5yG3jlD5
Malware Config
Signatures
Files
-
f41fbcd279966db8997a6bd3ada4c81ca2b2cc86e49df0feb57cb534cbfb17b3.exe windows x86
758e1ca99b733feddab6cf279f1185d6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord516
ord518
ord666
ord595
ord631
ord632
ord525
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord608
ord717
ProcCallEngine
ord537
ord644
ord100
ord616
Sections
.text Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.5b345b Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ