Static task
static1
Behavioral task
behavioral1
Sample
bd8f85d17d03fa1a56c4e2be5475975ce0bf1864fe52a47db076ef406dbab952.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bd8f85d17d03fa1a56c4e2be5475975ce0bf1864fe52a47db076ef406dbab952.exe
Resource
win10v2004-20220812-en
General
-
Target
bd8f85d17d03fa1a56c4e2be5475975ce0bf1864fe52a47db076ef406dbab952
-
Size
85KB
-
MD5
024c50372bb20a913ee867a083046b40
-
SHA1
9fbbc9e0a3dc7b54cae8a0a9501dc1f7ebcd8c0b
-
SHA256
bd8f85d17d03fa1a56c4e2be5475975ce0bf1864fe52a47db076ef406dbab952
-
SHA512
4b97ac3dd23d20c2a2b40e078878620b628e6cf3fce19d5b3606c63e783d47cdd6a33f0350467bf40e92488cab8e9b08b1999b783c72a13115d6adc7d0932261
-
SSDEEP
768:IX3J/FpapGjEf+STUMScCNOfcRgh2UtKdIKE7fO2/z7/UxCTY4noYq7AjkqF7vpp:IJ+wgL9D7ftCW722/zTbndjkoTahFq
Malware Config
Signatures
Files
-
bd8f85d17d03fa1a56c4e2be5475975ce0bf1864fe52a47db076ef406dbab952.exe windows x86
dc958fba37b482064363c1eb266d3443
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord620
ord516
ord626
ord519
ord553
ord666
ord598
ord520
ord631
ord632
ord525
ord526
EVENT_SINK_AddRef
ord528
ord529
ord561
DllFunctionCall
ord563
EVENT_SINK_Release
ord600
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord710
ord711
ord712
ord606
ord713
ord607
ord608
ord716
ord717
ProcCallEngine
ord537
ord644
ord645
ord570
ord648
ord681
ord578
ord685
ord100
ord616
ord617
ord618
ord543
ord544
ord546
Sections
.text Size: 79KB - Virtual size: 78KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ