Static task
static1
Behavioral task
behavioral1
Sample
8627b0c161cac5a47293b55fbd531d0b375fd475705ac5aaef838c776e922405.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
8627b0c161cac5a47293b55fbd531d0b375fd475705ac5aaef838c776e922405.exe
Resource
win10v2004-20220812-en
General
-
Target
8627b0c161cac5a47293b55fbd531d0b375fd475705ac5aaef838c776e922405
-
Size
512KB
-
MD5
81e3004b15fedf156075b120522f0b2b
-
SHA1
4ba1cee0ca0c66f50c2613edf58c932288808636
-
SHA256
8627b0c161cac5a47293b55fbd531d0b375fd475705ac5aaef838c776e922405
-
SHA512
1adf8434b42d5fe7a95f5a6aabecb85d461c48d425d57fda2934a551273f3f44cfebe286c0081ddfd42bea2e9b051b129581ac0ffb4acee471dd3b9472eefb04
-
SSDEEP
384:88zWXC95jK5GqnEMTTdc3DiucCQkes89u8kDIX8QDIY8fbDWwDQ:4XC9M0qnpT5u9QrsdF0XR0YaOQ
Malware Config
Signatures
Files
-
8627b0c161cac5a47293b55fbd531d0b375fd475705ac5aaef838c776e922405.exe windows x86
77a463315c3f885ff216e502851ad480
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord516
ord518
ord666
ord595
ord520
ord632
ord525
ord526
EVENT_SINK_AddRef
ord528
DllFunctionCall
ord670
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord606
ord608
ord717
ProcCallEngine
ord644
ord537
ord570
ord681
ord100
ord616
ord581
Sections
.text Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ