Static task
static1
Behavioral task
behavioral1
Sample
0af3cdeeb00f5d4e3a4f069e3e38389b336cdd99efeb3010663f40260000d2f7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0af3cdeeb00f5d4e3a4f069e3e38389b336cdd99efeb3010663f40260000d2f7.exe
Resource
win10v2004-20220812-en
General
-
Target
0af3cdeeb00f5d4e3a4f069e3e38389b336cdd99efeb3010663f40260000d2f7
-
Size
36KB
-
MD5
0c67662596eb8266eff1aaf4a340e2d0
-
SHA1
034d01f539094be8a072ef3f818e4018b21f6cd5
-
SHA256
0af3cdeeb00f5d4e3a4f069e3e38389b336cdd99efeb3010663f40260000d2f7
-
SHA512
22d8d1fc3d03664398fe408beb2996f98ce6f8af94602ff7e1117ab01ba93b23aa23673c523df5d7958ab9e8ae4ff7f64e18305429a73be2ca62e96e8467c49f
-
SSDEEP
768:n3+5h+Yf6SjYCr1+bAkpalxUkDUojTS5R5R:3Kh+k6uuaFUovQLR
Malware Config
Signatures
Files
-
0af3cdeeb00f5d4e3a4f069e3e38389b336cdd99efeb3010663f40260000d2f7.exe windows x86
00033d6917fc43c5ab56b2a2a5dc65c5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
imm32
ImmReleaseContext
msvbvm60
ord183
ord697
ord698
MethCallEngine
ord519
ord661
ord598
ord709
ord632
ord526
EVENT_SINK_AddRef
ord528
ord563
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord644
ord537
ord647
ord570
ord681
ord100
ord432
ord617
ord541
Sections
.text Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ