Static task
static1
Behavioral task
behavioral1
Sample
997612f806a2f01176c6bd72a960d8f5e684f13d24d81db413256c3cf395736a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
997612f806a2f01176c6bd72a960d8f5e684f13d24d81db413256c3cf395736a.exe
Resource
win10v2004-20220812-en
General
-
Target
997612f806a2f01176c6bd72a960d8f5e684f13d24d81db413256c3cf395736a
-
Size
36KB
-
MD5
3d3095022185bdcbbac882ac29c05522
-
SHA1
9ac2a82fee731eba81ed6abec37a3dd7b336f05a
-
SHA256
997612f806a2f01176c6bd72a960d8f5e684f13d24d81db413256c3cf395736a
-
SHA512
c2be708009682cd005f8d9f4991b4aebdac8622cbd99992e0a3b1cd7a1a61414acb1cd1b18ab0e46d81b2963bebfcf4067b0eacdfff6d59e30484fbb5efc73ef
-
SSDEEP
768:fYhuVX/bMVNH+TZ3/D+DfRKe09O8HLBGP:f0sX/bMScse6Ht
Malware Config
Signatures
Files
-
997612f806a2f01176c6bd72a960d8f5e684f13d24d81db413256c3cf395736a.exe windows x86
c4da8cb23d5192f7ade81fef7c0f681d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord183
ord697
ord698
ord519
ord592
ord598
ord709
ord632
ord526
EVENT_SINK_AddRef
ord528
ord563
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord644
ord537
ord647
ord570
ord680
ord681
ord100
ord432
ord617
Sections
.text Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ