Static task
static1
Behavioral task
behavioral1
Sample
ff5d0931870c6f1ed30de29903ed3f4d272fc8270fc5430b9846a6b3cbeda049.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ff5d0931870c6f1ed30de29903ed3f4d272fc8270fc5430b9846a6b3cbeda049.exe
Resource
win10v2004-20220901-en
General
-
Target
ff5d0931870c6f1ed30de29903ed3f4d272fc8270fc5430b9846a6b3cbeda049
-
Size
101KB
-
MD5
0799722e512e62a397745f5f6d01f1e0
-
SHA1
3fbb9f4333b62fc76830b1abf82bf8149c5417df
-
SHA256
ff5d0931870c6f1ed30de29903ed3f4d272fc8270fc5430b9846a6b3cbeda049
-
SHA512
022011a6868b2b8e89a106afdfe943aafce3a43bd9b46fa96d2120f20cd06f23c49ef46634a5cc4ff982e37bb2fc3e565ca84b87eff8aa5b84c6d66015c0604e
-
SSDEEP
1536:aNgBQka6YoGne0+e0bN5P545mkoMd5eExz9zg+5tuklUkxPBZ00Z5qmhUfrkSYtd:Laxm0+RJVGNpZBUaFeIc4ZDxKPS
Malware Config
Signatures
Files
-
ff5d0931870c6f1ed30de29903ed3f4d272fc8270fc5430b9846a6b3cbeda049.exe windows x86
391722f4b51436d208708dc013c75722
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord585
ord589
ord697
MethCallEngine
ord514
ord669
ord594
ord703
ord520
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
ord671
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord100
ord610
ord540
ord545
Sections
.text Size: 60KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ