Static task
static1
Behavioral task
behavioral1
Sample
14480f66895d08ba12b9c52c62199a62ee62302ab7bacd685ce15261b03bf41e.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
14480f66895d08ba12b9c52c62199a62ee62302ab7bacd685ce15261b03bf41e.exe
Resource
win10v2004-20220812-en
General
-
Target
14480f66895d08ba12b9c52c62199a62ee62302ab7bacd685ce15261b03bf41e
-
Size
588KB
-
MD5
0f120aabe401a3285338b986eefd0dab
-
SHA1
2c3769cc8726f730ca0a182441cf8d3f92a3861e
-
SHA256
14480f66895d08ba12b9c52c62199a62ee62302ab7bacd685ce15261b03bf41e
-
SHA512
6a7928639dbcfcbc4f41b72d1bcb4b19fb45910b4eb5a46dba5058a214ab5f1bdf11a04cee82caa136f63287ed9f96815adb18133e0d80f8973f5ea1ef97ea3a
-
SSDEEP
12288:9evuwzGIWFn+n047sx+cJReaElNaAC0j0dw0w:EYrOlNQA0a0
Malware Config
Signatures
Files
-
14480f66895d08ba12b9c52c62199a62ee62302ab7bacd685ce15261b03bf41e.exe windows x86
4330a96c5df37b0562fb3120736a6dd6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
msvbvm60
MethCallEngine
ord516
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ord608
ord717
ProcCallEngine
ord644
ord681
ord100
ord581
Sections
.text Size: 320KB - Virtual size: 320KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 116KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pebundle Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pebundle Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pebundle Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pebundle Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE