Static task
static1
Behavioral task
behavioral1
Sample
1219a45925b3f433e04141b3d046cc542a80ca95874bc823a5bebbf7e756f9bf.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
1219a45925b3f433e04141b3d046cc542a80ca95874bc823a5bebbf7e756f9bf.exe
Resource
win10v2004-20220812-en
General
-
Target
1219a45925b3f433e04141b3d046cc542a80ca95874bc823a5bebbf7e756f9bf
-
Size
206KB
-
MD5
065f01d667c9b060b0b5d0531b970456
-
SHA1
08e38e9807c1ca85d003bb473faf1bb9269f6476
-
SHA256
1219a45925b3f433e04141b3d046cc542a80ca95874bc823a5bebbf7e756f9bf
-
SHA512
e7b0b4c184680c4e6425c0fd2b696abd5e79fe75b45ba99205346fb2a747b38c830e44caaf055607738859509f010747bab827112059b00eb2a98a98742dbf01
-
SSDEEP
3072:n3Jwz+5cR8vR6uhhtwdyHYLVFeJT28RibptaPvNefUf8yl896l3QJLqxOYr:n3JwQcR8ZdurFucptalV8yM23QdlY
Malware Config
Signatures
Files
-
1219a45925b3f433e04141b3d046cc542a80ca95874bc823a5bebbf7e756f9bf.exe windows x86
3df4d3f940ce543677165b4a7f055121
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
ShowWindow
CallWindowProcA
kernel32
GetProcAddress
FreeResource
LoadResource
SizeofResource
LoadLibraryA
FreeLibrary
LockResource
ExitProcess
msvbvm60
ord696
MethCallEngine
ord518
ord598
ord520
ord522
ord524
ord632
ord526
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord717
ProcCallEngine
ord644
ord645
ord100
ord617
ord619
Sections
.text Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 187KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ