Static task
static1
Behavioral task
behavioral1
Sample
d611c50fe4f1dbacdbff59a9d25fb6dc2ffe013009ca237cb5b452716213ad48.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d611c50fe4f1dbacdbff59a9d25fb6dc2ffe013009ca237cb5b452716213ad48.exe
Resource
win10v2004-20220901-en
General
-
Target
d611c50fe4f1dbacdbff59a9d25fb6dc2ffe013009ca237cb5b452716213ad48
-
Size
36KB
-
MD5
82f3bae01630cab49b1d6486fd8f4b40
-
SHA1
c42919f53472518ea6c2f575e316b46869a5b679
-
SHA256
d611c50fe4f1dbacdbff59a9d25fb6dc2ffe013009ca237cb5b452716213ad48
-
SHA512
4c6b25fdb7a6269ddff7cb08da9ba70e99b690a48649d32e18f174aef4129ec379c45ac9282243f78328c6a4e5de87de1e0dccc4e39caa362ac2f8a1520489d0
-
SSDEEP
768:VFvSpEHMc2GWhu4VTL8xiLmw+lJYCyZ3:VJSex/lxcj+lJU
Malware Config
Signatures
Files
-
d611c50fe4f1dbacdbff59a9d25fb6dc2ffe013009ca237cb5b452716213ad48.exe windows x86
01d2bd638f0a976b01a69b7fb5b85b2b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
AreAllAccessesGranted
kernel32
MulDiv
msvbvm60
ord183
ord669
EVENT_SINK_AddRef
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord714
ord717
ProcCallEngine
ord644
ord570
ord649
ord100
ord432
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ