Static task
static1
Behavioral task
behavioral1
Sample
eefbd77964a8424cc1eb8e4701fb84ee007671311f024013bb8402273599e583.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
eefbd77964a8424cc1eb8e4701fb84ee007671311f024013bb8402273599e583.exe
Resource
win10v2004-20220812-en
General
-
Target
eefbd77964a8424cc1eb8e4701fb84ee007671311f024013bb8402273599e583
-
Size
324KB
-
MD5
33f1c99843881150d1af32ef9265f5aa
-
SHA1
96a9d570b40c639dd92040b6484385391383f48a
-
SHA256
eefbd77964a8424cc1eb8e4701fb84ee007671311f024013bb8402273599e583
-
SHA512
bade7e833d351789b5a842a6fab833b5ea237191b05d72c0f8e49dc590e8329eff54bd159acd642ec83dd4ddcb39b378a5ce9b056a3e2636db84942109807bd0
-
SSDEEP
6144:GZe7NN2GDDv7RzKCeDfFK04AqoD9NS66He2/87z9UR9qUtNfDkXFShFGmbslVSWt:Se7XTqasl8W
Malware Config
Signatures
Files
-
eefbd77964a8424cc1eb8e4701fb84ee007671311f024013bb8402273599e583.exe windows x86
0cb4bf2b9c01cc067ffc93b176f21586
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord516
ord517
ord662
ord593
ord594
ord595
ord598
ord520
ord631
ord525
ord632
ord526
EVENT_SINK_AddRef
ord528
DllFunctionCall
ord564
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord714
ord607
ord608
ord717
ProcCallEngine
ord535
ord537
ord572
ord573
ord681
ord100
ord614
ord616
ord617
ord619
ord546
Sections
.text Size: 316KB - Virtual size: 313KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ