Static task
static1
Behavioral task
behavioral1
Sample
6e408d1c56ba07efc0c57843a05020d06bc18a4f27f16bfd3055d21b530159ea.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6e408d1c56ba07efc0c57843a05020d06bc18a4f27f16bfd3055d21b530159ea.exe
Resource
win10v2004-20220901-en
General
-
Target
6e408d1c56ba07efc0c57843a05020d06bc18a4f27f16bfd3055d21b530159ea
-
Size
144KB
-
MD5
0f0fc295161909a78154b6fe1d5bb671
-
SHA1
fe29052744c21d8ce78f0a8c66a251e47f39c4ec
-
SHA256
6e408d1c56ba07efc0c57843a05020d06bc18a4f27f16bfd3055d21b530159ea
-
SHA512
37b54af9ba7a6277e1ed1a1828d3b454cd6855b5f2b56e40b3f9282bb0e675dc4e7f9ae8a3ba648ef33b5f7aae1aed1e21f82c6d503abdeb0f7c951b6851ed15
-
SSDEEP
3072:ofK5ZKPTN9ykEjqRAYKKGy39VK2F4Ocx3Fm1H3H3:h5ZKPTNthmSVKc1H3X
Malware Config
Signatures
Files
-
6e408d1c56ba07efc0c57843a05020d06bc18a4f27f16bfd3055d21b530159ea.exe windows x86
e41f3da75e05886522f9315ef406e8df
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord644
ord100
ord430
Sections
.text Size: 92KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE