Static task
static1
Behavioral task
behavioral1
Sample
5d818890f85636d428ad2e9a94a80e733ca393938092c0ecdb6fdef701ddc38d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5d818890f85636d428ad2e9a94a80e733ca393938092c0ecdb6fdef701ddc38d.exe
Resource
win10v2004-20220812-en
General
-
Target
5d818890f85636d428ad2e9a94a80e733ca393938092c0ecdb6fdef701ddc38d
-
Size
104KB
-
MD5
a249667ce0de850ad2db703134a3a4fa
-
SHA1
a48804e445e601f492fe0c2f55131697599f8b76
-
SHA256
5d818890f85636d428ad2e9a94a80e733ca393938092c0ecdb6fdef701ddc38d
-
SHA512
c048769be765a29a4a9e9e5e20c900ace96b048f78d363018064f8eda2651f68edd6f6cfaa088ca6a869dd359b3f719118279164536a35e7b43b49a49271b636
-
SSDEEP
384:/KqJ6dvSzb++QBP9hduYGARiCpdm7r4dwUCG+eMY1eKnI2CTq1hPWUZt0w0sD6iW:ihdvw+9BVxRiyJsVBuvI2kv
Malware Config
Signatures
Files
-
5d818890f85636d428ad2e9a94a80e733ca393938092c0ecdb6fdef701ddc38d.exe windows x86
9b246d58c962f2d59f1859aa14fdd178
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord660
ord598
ord520
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord716
ProcCallEngine
ord535
ord645
ord648
ord578
ord100
ord617
ord546
ord581
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE