Static task
static1
Behavioral task
behavioral1
Sample
6fe4c20bc15c035b1668a74af09429066879957743899f08ee442f199d4bbabd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6fe4c20bc15c035b1668a74af09429066879957743899f08ee442f199d4bbabd.exe
Resource
win10v2004-20220901-en
General
-
Target
6fe4c20bc15c035b1668a74af09429066879957743899f08ee442f199d4bbabd
-
Size
101KB
-
MD5
67873bba0c0d770765c68fae763ae32e
-
SHA1
bd60ae1c9732268492f2932807e4cc1daab7bc2d
-
SHA256
6fe4c20bc15c035b1668a74af09429066879957743899f08ee442f199d4bbabd
-
SHA512
4f1f134a46c6716bbbfa1f13379c8ca2a4751ea51ab618c8d51c1557176acd8458526d262a681ad6e22631778dbf70598e2a8162fd811a96a5e2f82d5b24e68e
-
SSDEEP
3072:yQbDRwtda+9mU/1muYzoaeU2UV5c/5P59:R4AUPqA9rBP59
Malware Config
Signatures
Files
-
6fe4c20bc15c035b1668a74af09429066879957743899f08ee442f199d4bbabd.exe windows x86
1a167498f876e791037b191c340bae0a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord516
ord300
ord595
ord599
ord306
ord631
ord525
ord526
EVENT_SINK_AddRef
DllFunctionCall
ord563
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord717
ProcCallEngine
ord537
ord645
ord648
ord570
ord571
ord100
ord616
ord581
Sections
.text Size: 36KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ