Static task
static1
Behavioral task
behavioral1
Sample
ddcfd76e848edc9f452652e6f662ba2eca121a3097ed9ea1267d0f3c5e3668ff.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ddcfd76e848edc9f452652e6f662ba2eca121a3097ed9ea1267d0f3c5e3668ff.exe
Resource
win10v2004-20221111-en
General
-
Target
ddcfd76e848edc9f452652e6f662ba2eca121a3097ed9ea1267d0f3c5e3668ff
-
Size
105KB
-
MD5
536ca09ffe8a16c8cb742b299fe1204d
-
SHA1
15fa786bcc63e7a60f215f250bd2934e2a9e0603
-
SHA256
ddcfd76e848edc9f452652e6f662ba2eca121a3097ed9ea1267d0f3c5e3668ff
-
SHA512
a3c0fddc216639ca63cee3aefe4072f4560df39ece966d99a904f3b9ea7746a00855b08016b4d70a22e926643798412f1efacd810349a0cb5d88c4e7b9706829
-
SSDEEP
1536:InE9SNA6nsDbYHTJ26p4dTR6GMyYKOsNznn3WuKDWnCvORi1wM1EAf7nctzKFKU8:yVnsDbY12e7ahn3WCCWPKEMnyc9L64
Malware Config
Signatures
Files
-
ddcfd76e848edc9f452652e6f662ba2eca121a3097ed9ea1267d0f3c5e3668ff.exe windows x86
ef68d05eff732aa30ba52ea42b35191f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord585
MethCallEngine
ord669
ord305
ord705
ord520
ord522
ord709
EVENT_SINK_AddRef
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord644
ord100
ord545
Sections
.text Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ