Static task
static1
Behavioral task
behavioral1
Sample
7187f94e3910b5b31b2887139f9ff39289bbc3f287abcedb4c6994c1a167e605.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
7187f94e3910b5b31b2887139f9ff39289bbc3f287abcedb4c6994c1a167e605.exe
Resource
win10v2004-20221111-en
General
-
Target
7187f94e3910b5b31b2887139f9ff39289bbc3f287abcedb4c6994c1a167e605
-
Size
469KB
-
MD5
495e07202ada1e3fd9ba7dddc8ff5640
-
SHA1
05d96157ca7e67256036a896a2716aaa43da253e
-
SHA256
7187f94e3910b5b31b2887139f9ff39289bbc3f287abcedb4c6994c1a167e605
-
SHA512
6a3ab40a385c2bda79fdca77576dc900e69aebc34959fac63c50930c9b1e89d620611efb356ac60132bab6d52fca3676277454e4f5652729cdcbfac70ee3393e
-
SSDEEP
12288:Jviomjr6FpGr9ZQE2bFzOLFolXLiQFLPP:9ir7ZQYFo9LiQFLPP
Malware Config
Signatures
Files
-
7187f94e3910b5b31b2887139f9ff39289bbc3f287abcedb4c6994c1a167e605.exe windows x86
477395ee600371f5d7f9d8adc6a2afe0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CallWindowProcA
SystemParametersInfoW
msvbvm60
ord582
ord584
ord585
ord586
ord587
ord696
MethCallEngine
ord598
ord631
ord632
EVENT_SINK_AddRef
DllFunctionCall
ord563
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord535
ord644
ord681
ord578
ord100
ord616
Sections
.text Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ