Static task
static1
Behavioral task
behavioral1
Sample
f70ad6c6ef48e93c7b7470b8516e09195481b6f59da062abc5e4a3ab19aa3ac5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f70ad6c6ef48e93c7b7470b8516e09195481b6f59da062abc5e4a3ab19aa3ac5.exe
Resource
win10v2004-20220812-en
General
-
Target
f70ad6c6ef48e93c7b7470b8516e09195481b6f59da062abc5e4a3ab19aa3ac5
-
Size
360KB
-
MD5
3b029f359530b163f31cfec80cb88cb0
-
SHA1
3326a4fbcd3184dcd91ecccb2d655a9501ac6042
-
SHA256
f70ad6c6ef48e93c7b7470b8516e09195481b6f59da062abc5e4a3ab19aa3ac5
-
SHA512
63b8dc48724c1eb86dd115fa7685954f5770a48cbe7ade6f86eb7e8b9994dcdd9bff90f5a37429eac3e19d33ce211fdc22e6f3ba0fde3b080aa9365d9e4577ca
-
SSDEEP
3072:wHWJdMborPteTOyN6KdTVJMRlIqCyr2h0DGFPaFjvfryE:wHuMborPtq8A/cIUYaFjvfr
Malware Config
Signatures
Files
-
f70ad6c6ef48e93c7b7470b8516e09195481b6f59da062abc5e4a3ab19aa3ac5.exe windows x86
3fa2145887d271c36a26ad7d128c775c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord696
MethCallEngine
ord517
ord518
ord628
ord300
ord595
ord598
ord599
ord306
ord521
ord709
ord631
ord525
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord713
ord714
ProcCallEngine
ord644
ord537
ord645
ord570
ord681
ord576
ord578
ord100
ord610
ord612
ord616
ord618
ord581
Sections
.text Size: 352KB - Virtual size: 349KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ