Static task
static1
Behavioral task
behavioral1
Sample
0c50f99845866533efb13562970b181a6e14cad893f034fb7657260301331bc0.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
0c50f99845866533efb13562970b181a6e14cad893f034fb7657260301331bc0.exe
Resource
win10v2004-20220812-en
General
-
Target
0c50f99845866533efb13562970b181a6e14cad893f034fb7657260301331bc0
-
Size
305KB
-
MD5
1776769de39829723af88949d31d2029
-
SHA1
b7d44cacbf0c7d8738c88e2a62f30a0aeb7b8985
-
SHA256
0c50f99845866533efb13562970b181a6e14cad893f034fb7657260301331bc0
-
SHA512
57cbb195b61c7e265ef5d627d154cd174d9c5faf4a7f702a4971fe85b9c483f0ae0485dd64ca0f6db5d06e9dfeca7093b5426fe5e1f9b3894a7bbcc3a7188b63
-
SSDEEP
6144:3OmgmJ/8CmLWCEeO3aVJqeaXAX9/JE7HVFYSxofEbhEeeUX:3TkCmLieO35XAN/a71iSxoE
Malware Config
Signatures
Files
-
0c50f99845866533efb13562970b181a6e14cad893f034fb7657260301331bc0.exe windows x86
bcf658dea0f6f1c96ea144d1ed6a4ea2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord516
ord593
ord594
ord631
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord608
ord717
ProcCallEngine
ord537
ord644
ord648
ord570
ord572
ord573
ord681
ord685
ord578
ord100
ord619
ord581
Sections
.text Size: 52KB - Virtual size: 50KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ