Static task
static1
Behavioral task
behavioral1
Sample
2b1c651e24292af2d61e9ab064e953864e99a51a3263b0987a48335d2008ff89.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
2b1c651e24292af2d61e9ab064e953864e99a51a3263b0987a48335d2008ff89.exe
Resource
win10v2004-20221111-en
General
-
Target
2b1c651e24292af2d61e9ab064e953864e99a51a3263b0987a48335d2008ff89
-
Size
20KB
-
MD5
370d39340464a529b9740d193ce657a0
-
SHA1
3246d446e6865d525cc0fca9b9c44b41883660f9
-
SHA256
2b1c651e24292af2d61e9ab064e953864e99a51a3263b0987a48335d2008ff89
-
SHA512
5634c2d0ea48792c983507e7040772b6d7469e9d43e022ffcecf6d712589029e0496b2c09bf19b458aaa9f2fe013e9f93aef66b2d3340c75d225bacab6206909
-
SSDEEP
192:1l5E3krTuntKy0peHDfCpHfBv+I4QwXt9V+jqu0G5KDJBJR:1M3PnQoHDCpHf4I4Qwdc0G5KDJZ
Malware Config
Signatures
Files
-
2b1c651e24292af2d61e9ab064e953864e99a51a3263b0987a48335d2008ff89.exe windows x86
96e57d09efd03a48c83f1349e435734e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord666
ord598
ord709
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord713
ord607
ord608
ord531
ord645
ord570
ord576
ord100
ord617
ord619
ord580
Sections
.text Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ