Static task
static1
Behavioral task
behavioral1
Sample
f6b7aa5fd875b65ae03e79c367190b813d52b31a0ec015a32cd1dd4768d04fb6.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f6b7aa5fd875b65ae03e79c367190b813d52b31a0ec015a32cd1dd4768d04fb6.exe
Resource
win10v2004-20220901-en
General
-
Target
f6b7aa5fd875b65ae03e79c367190b813d52b31a0ec015a32cd1dd4768d04fb6
-
Size
272KB
-
MD5
133e56230ab4be291045d73691192e40
-
SHA1
78cd3e6c36e6ccffba5976f8763288b1f52af7d2
-
SHA256
f6b7aa5fd875b65ae03e79c367190b813d52b31a0ec015a32cd1dd4768d04fb6
-
SHA512
9d9dca60afa34148b2848045887c18a96ac74c1e467465634dac4526e5c0f10743225b91666af0af73a194799636f99c33140121e5d0a8d50ec20c2a9049e0de
-
SSDEEP
6144:4S/ogrba9J0jRVXXFR7JTZjkQ7dsdQ3pRXJYF8:4S/ognaiVlJLRd1pRXO
Malware Config
Signatures
Files
-
f6b7aa5fd875b65ae03e79c367190b813d52b31a0ec015a32cd1dd4768d04fb6.exe windows x86
d76a4cf1cb3dae11fab1e47eb6c574b5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord589
MethCallEngine
ord660
ord558
ord668
ord598
EVENT_SINK_AddRef
ord560
DllFunctionCall
ord672
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord710
ord534
ProcCallEngine
ord649
ord100
ord656
ord658
ord581
Sections
.text Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 248KB - Virtual size: 245KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ