Static task
static1
Behavioral task
behavioral1
Sample
a2661dacf01a1d4329dc190c65e970ecd8f37f2cc785754853b822f647d219fe.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a2661dacf01a1d4329dc190c65e970ecd8f37f2cc785754853b822f647d219fe.exe
Resource
win10v2004-20220812-en
General
-
Target
a2661dacf01a1d4329dc190c65e970ecd8f37f2cc785754853b822f647d219fe
-
Size
132KB
-
MD5
0d9eb5bc721084321df146a70a124682
-
SHA1
597226f627a8892b43cf7a129a6dad92a6769a45
-
SHA256
a2661dacf01a1d4329dc190c65e970ecd8f37f2cc785754853b822f647d219fe
-
SHA512
50a0db882281eac30a42a31ee8e90bed2a6104b1a9471a276288daa4e3d82dfde92bdf3853473d39d1f6e4c0af5fe61f1a8d2bbb2ab309d2bdf1d1ec41cd895c
-
SSDEEP
384:KxXIUXxu/APv8uxQMeubc12jEtaqYVnbqxbR+g3BlwP59Qh2yKfPb+5iNFbNoBsG:KJdxLH8hQYKMYV4MfQhw0S0h7dxLH8u
Malware Config
Signatures
Files
-
a2661dacf01a1d4329dc190c65e970ecd8f37f2cc785754853b822f647d219fe.exe windows x86
a4808e57d356b027175e395bc3ec6653
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord516
ord660
ord661
ord303
ord598
ord520
ord309
ord631
ord632
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
ord566
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord716
ord531
ord717
ProcCallEngine
ord537
ord645
ord570
ord648
ord685
ord578
ord100
ord579
ord616
ord617
ord618
ord540
ord546
ord580
Sections
.text Size: 36KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE