Static task
static1
Behavioral task
behavioral1
Sample
7ea0572dc615537bd8b8665de3d33305ad33e7f77d05db964fc2048a2d9bac3a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7ea0572dc615537bd8b8665de3d33305ad33e7f77d05db964fc2048a2d9bac3a.exe
Resource
win10v2004-20221111-en
General
-
Target
7ea0572dc615537bd8b8665de3d33305ad33e7f77d05db964fc2048a2d9bac3a
-
Size
40KB
-
MD5
ad6d3cd49d5d64f69cd90db0d31379ba
-
SHA1
0da586cd05874c50783386f4a19ba501774678fa
-
SHA256
7ea0572dc615537bd8b8665de3d33305ad33e7f77d05db964fc2048a2d9bac3a
-
SHA512
9dbdd683f3223825fddbf70683933f77835cae45f6209b8542a06286afbcc0ba85e2e679ef33b34b0176329f9437f54fba5a38f20d42bcb63572889fbb70269f
-
SSDEEP
768:uUVUDsjUyGnHyxwS9m4N87Nz/4HywO4TDTWot:uUVURy2yxw4NOU
Malware Config
Signatures
Files
-
7ea0572dc615537bd8b8665de3d33305ad33e7f77d05db964fc2048a2d9bac3a.exe windows x86
21d5a2dd300a65a7b96d0662321a0425
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord582
MethCallEngine
ord517
ord519
ord626
ord666
ord593
ord594
ord595
ord598
ord525
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord606
ord607
ord608
ord716
ord534
ProcCallEngine
ord535
ord536
ord537
ord645
ord681
ord578
ord685
ord100
ord616
ord618
ord580
Sections
.text Size: 32KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ