Static task
static1
Behavioral task
behavioral1
Sample
ff9e54598ad10698e40089b75a503ca762fd789fd3f12d17e399f572476a6091.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ff9e54598ad10698e40089b75a503ca762fd789fd3f12d17e399f572476a6091.exe
Resource
win10v2004-20220901-en
General
-
Target
ff9e54598ad10698e40089b75a503ca762fd789fd3f12d17e399f572476a6091
-
Size
36KB
-
MD5
07b3c93e52e137d3ee4df98ebcfffec6
-
SHA1
6d040bd215d5bf9bf661770bc8beeb03826a07bb
-
SHA256
ff9e54598ad10698e40089b75a503ca762fd789fd3f12d17e399f572476a6091
-
SHA512
869058894c7a16f9b6310cc7904b6b8179907b1053d15f39fadab0710c5c173d3ceaede9e1cb4d19c0631ce6058a6d61e35c85c264998af9bd88636f31dc284f
-
SSDEEP
768:AeVK1TH1xiDJrJ2U2ySjuLCnYQNgPl2swrR:Av1THzUG1Ngtq
Malware Config
Signatures
Files
-
ff9e54598ad10698e40089b75a503ca762fd789fd3f12d17e399f572476a6091.exe windows x86
83c3f0c592fef96815226049116b4702
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
AreAllAccessesGranted
kernel32
MulDiv
msvbvm60
ord183
ord583
ord669
ord709
EVENT_SINK_AddRef
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord570
ord100
ord432
Sections
.text Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ