Static task
static1
Behavioral task
behavioral1
Sample
1edf518895f9890807bd5ca82999fa7288b9582c076f975e70386a8252f59c13.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
1edf518895f9890807bd5ca82999fa7288b9582c076f975e70386a8252f59c13.exe
Resource
win10v2004-20221111-en
General
-
Target
1edf518895f9890807bd5ca82999fa7288b9582c076f975e70386a8252f59c13
-
Size
344KB
-
MD5
0a4c19c7788721556d20f0a388ee4f80
-
SHA1
dea03906ebe59fe85d1fd7a90effaae19efe16a4
-
SHA256
1edf518895f9890807bd5ca82999fa7288b9582c076f975e70386a8252f59c13
-
SHA512
e3c96bb5891b6b22d4b427f5c722c14a0ab20f177b9147e83d1eb13aefc7796fed9daf17befa88e4ec502e08bf7697e856c44ee431cb1f041b8c0c1a4a2a308f
-
SSDEEP
6144:0KMXtfMrfOY37/ssEOU5TtaCcZesTtf3cT:0KrnDs/QCcZbyT
Malware Config
Signatures
Files
-
1edf518895f9890807bd5ca82999fa7288b9582c076f975e70386a8252f59c13.exe windows x86
5dabf9bf79f0e9e2d5d70d7673057db6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord589
MethCallEngine
ord595
ord596
ord632
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord644
ord100
ord617
Sections
.text Size: 312KB - Virtual size: 310KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ