Static task
static1
Behavioral task
behavioral1
Sample
85d89f9be6746d090978ab4e1d181b18833587ad74202c1c7930e3dccaf6ac30.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
85d89f9be6746d090978ab4e1d181b18833587ad74202c1c7930e3dccaf6ac30.exe
Resource
win10v2004-20220812-en
General
-
Target
85d89f9be6746d090978ab4e1d181b18833587ad74202c1c7930e3dccaf6ac30
-
Size
345KB
-
MD5
a36d5f7153bc911049669e1ea69a69f0
-
SHA1
1b022e60f5564d4914ae3a2e463ad222448692f7
-
SHA256
85d89f9be6746d090978ab4e1d181b18833587ad74202c1c7930e3dccaf6ac30
-
SHA512
daf5fe77d49d75ff283716cdd647fda9b797da2c00c665135e50d542773079c7cb569d8325c65c04d5923288ae7f89cc444fdd731408edd9ea18db6cd3b0138b
-
SSDEEP
6144:ehu2pi/pBrjk4dH24livcj4IRgEd8/mE6HuD5AwD7bwgXat1:esCi/pRI2lf9SEdutDbVC1
Malware Config
Signatures
Files
-
85d89f9be6746d090978ab4e1d181b18833587ad74202c1c7930e3dccaf6ac30.exe windows x86
39fe68e7ed3ce72c5f86e56abaf52bac
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord518
ord519
ord553
ord660
ord593
ord598
ord632
ord525
ord526
EVENT_SINK_AddRef
ord527
ord529
DllFunctionCall
ord563
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord608
ord717
ProcCallEngine
ord535
ord537
ord644
ord570
ord648
ord578
ord100
ord610
ord616
ord617
ord619
ord542
ord545
ord548
ord581
Sections
.data Size: 48KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 281KB - Virtual size: 281KB