Static task
static1
Behavioral task
behavioral1
Sample
1ffa7682d7389bebffb59ac0cfb7783c87d8b3de16f9019c13c1b9520071a3b8.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
1ffa7682d7389bebffb59ac0cfb7783c87d8b3de16f9019c13c1b9520071a3b8.exe
Resource
win10v2004-20220901-en
General
-
Target
1ffa7682d7389bebffb59ac0cfb7783c87d8b3de16f9019c13c1b9520071a3b8
-
Size
36KB
-
MD5
a2da99bc5cc2559eb6870737449487f0
-
SHA1
8b66613bee97f8da47e22d0539afac7518b435af
-
SHA256
1ffa7682d7389bebffb59ac0cfb7783c87d8b3de16f9019c13c1b9520071a3b8
-
SHA512
2db3b57466fd5693c7cdf6dbdc9a270b896c6216f67bc50c61face8c6b9cb43c95e18003c7789c30d299b99bb72b665546442be008f3f15cd50210a8372b63dd
-
SSDEEP
768:m48989Pl633h/UTojJmeWeGv/w+lJYCyZe:msPl6ay63o+lJR
Malware Config
Signatures
Files
-
1ffa7682d7389bebffb59ac0cfb7783c87d8b3de16f9019c13c1b9520071a3b8.exe windows x86
01d2bd638f0a976b01a69b7fb5b85b2b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
AreAllAccessesGranted
kernel32
MulDiv
msvbvm60
ord183
ord669
EVENT_SINK_AddRef
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord714
ord717
ProcCallEngine
ord644
ord570
ord649
ord100
ord432
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ