Static task
static1
Behavioral task
behavioral1
Sample
ed1fd0043959a56ff94727659214ec8843ecd00deab0c7e255166baf8c38c30a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ed1fd0043959a56ff94727659214ec8843ecd00deab0c7e255166baf8c38c30a.exe
Resource
win10v2004-20220812-en
General
-
Target
ed1fd0043959a56ff94727659214ec8843ecd00deab0c7e255166baf8c38c30a
-
Size
792KB
-
MD5
150870e09680a9208717a4bf0dbd7b00
-
SHA1
b7ac80ee1ac84911ef6989b65c7f871ace9c2052
-
SHA256
ed1fd0043959a56ff94727659214ec8843ecd00deab0c7e255166baf8c38c30a
-
SHA512
6f03b2156ed7658921f4c78b6786c830f55c9f771462e564bbb8f6fecc8f6fa9fe86e53e2a57e0b25d50555a2443e1da337d78d1af7e76bed2b1056b4f675d95
-
SSDEEP
12288:3vJt0idn673b33FeokUwwwMMNoOrAAgQCSKewTPOXdSpZDxI:3vJtF6wMTPMQjD
Malware Config
Signatures
Files
-
ed1fd0043959a56ff94727659214ec8843ecd00deab0c7e255166baf8c38c30a.exe windows x86
b6860646b0b0a9283bef87e72dcc85c1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_SYSTEM
IMAGE_FILE_BYTES_REVERSED_HI
Imports
msvbvm60
MethCallEngine
ord516
ord595
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord717
ProcCallEngine
ord644
ord645
ord648
ord570
ord573
ord100
ord616
ord617
ord650
Sections
.text Size: 632KB - Virtual size: 629KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 156KB - Virtual size: 154KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ