Static task
static1
Behavioral task
behavioral1
Sample
eba56e2454c2a068ee7338ec5e44e625a6df0c295cafcf70be4d9af7137376f5.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
eba56e2454c2a068ee7338ec5e44e625a6df0c295cafcf70be4d9af7137376f5.exe
Resource
win10v2004-20220812-en
General
-
Target
eba56e2454c2a068ee7338ec5e44e625a6df0c295cafcf70be4d9af7137376f5
-
Size
36KB
-
MD5
a3867742c250d0baed12360c71529b88
-
SHA1
9b3765a1b87688b78393f0f0ed43a5c42c17814c
-
SHA256
eba56e2454c2a068ee7338ec5e44e625a6df0c295cafcf70be4d9af7137376f5
-
SHA512
ab0d57136b92ece51eb669b5e3c4080defd37af73b90989c659132d41cc0b94b00365a9c8e17db58f0470dac431448f7f58d330ac544db16ef8940bbb4a10a24
-
SSDEEP
768:YLDFq/bMVNH+TZ3/D+DfRKe09O8HLhmP:Ylq/bMScse6HN
Malware Config
Signatures
Files
-
eba56e2454c2a068ee7338ec5e44e625a6df0c295cafcf70be4d9af7137376f5.exe windows x86
c4da8cb23d5192f7ade81fef7c0f681d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord183
ord697
ord698
ord519
ord592
ord598
ord709
ord632
ord526
EVENT_SINK_AddRef
ord528
ord563
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord644
ord537
ord647
ord570
ord680
ord681
ord100
ord432
ord617
Sections
.text Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ