Static task
static1
Behavioral task
behavioral1
Sample
109bd22943c1dcd105fb1aab401509fc7c5dbcb39b126f1a9b70d1e52946b0eb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
109bd22943c1dcd105fb1aab401509fc7c5dbcb39b126f1a9b70d1e52946b0eb.exe
Resource
win10v2004-20221111-en
General
-
Target
109bd22943c1dcd105fb1aab401509fc7c5dbcb39b126f1a9b70d1e52946b0eb
-
Size
159KB
-
MD5
435d0674ea2950b2ffe462ab832cd349
-
SHA1
3add66c69d51770ac8ffa9f9172701ebe11b7d57
-
SHA256
109bd22943c1dcd105fb1aab401509fc7c5dbcb39b126f1a9b70d1e52946b0eb
-
SHA512
be4ae9353dfcc42e8470bfcfd94c8b9c10a6d2e757ba3909e3a6983e7e29e7efe91d7f6207f37774ea6ed8aedf4e96eaabbc9da5c931b39cb482adbc1f422e1a
-
SSDEEP
3072:7TzREHZMjeO2Twnf8Qjv4t0GmFkBjiZvdSecpseEQ9k8qmdK040qhTx:7fqHsejTYvA0CBjKSecprZkbmd8l1
Malware Config
Signatures
Files
-
109bd22943c1dcd105fb1aab401509fc7c5dbcb39b126f1a9b70d1e52946b0eb.exe windows x86
b9383b0dbd844ffd279aedc70a4265a6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
DeregisterEventSource
msvbvm60
ord183
ord589
ord553
ord668
ord594
EVENT_SINK_AddRef
DllFunctionCall
ord563
ord670
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord714
ord717
ProcCallEngine
ord537
ord644
ord570
ord100
ord615
ord432
ord547
Sections
.text Size: 148KB - Virtual size: 147KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ