Static task
static1
Behavioral task
behavioral1
Sample
d6973b6c3203401becd0730a0730a2885b0e322ea9cd89ef9f80f81d1501f62c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d6973b6c3203401becd0730a0730a2885b0e322ea9cd89ef9f80f81d1501f62c.exe
Resource
win10v2004-20220901-en
General
-
Target
d6973b6c3203401becd0730a0730a2885b0e322ea9cd89ef9f80f81d1501f62c
-
Size
200KB
-
MD5
929c6e4c456c74488309008b9ce15303
-
SHA1
13564ed70bd4eb3c6585a40ede72059dad7a052f
-
SHA256
d6973b6c3203401becd0730a0730a2885b0e322ea9cd89ef9f80f81d1501f62c
-
SHA512
01e420e4ed8a519f50fb85a42819e73a395348c26671c1dea6d1823358c9887c8fccf1cee5e002b6597a995010c22832b5c7e49acab1edf08bb4afe866b24133
-
SSDEEP
3072:wJCD54viJeCJKrk3BM8UIeSRdBI+ooCAOPOFO/xGI6LqSS+2Y:L/wkxjUIeSLyeCAOPiO/IIqqm2Y
Malware Config
Signatures
Files
-
d6973b6c3203401becd0730a0730a2885b0e322ea9cd89ef9f80f81d1501f62c.exe windows x86
ea23fc29d95be057d4e7c6b77d74a60d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord626
ord595
ord598
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord716
ProcCallEngine
ord535
ord645
ord570
ord571
ord576
ord100
ord617
ord581
Sections
.text Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wvxozuk Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE