Static task
static1
Behavioral task
behavioral1
Sample
a9d95ddb94b49f48197b25a5edfbc7265c9abd91a6efccaec81353dd4c9388cc.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a9d95ddb94b49f48197b25a5edfbc7265c9abd91a6efccaec81353dd4c9388cc.exe
Resource
win10v2004-20220812-en
General
-
Target
a9d95ddb94b49f48197b25a5edfbc7265c9abd91a6efccaec81353dd4c9388cc
-
Size
116KB
-
MD5
06076d35d58368112aca2c2e4bb1f207
-
SHA1
df8fbe44af143a804d9423d7c7fde4cc88bb5ddd
-
SHA256
a9d95ddb94b49f48197b25a5edfbc7265c9abd91a6efccaec81353dd4c9388cc
-
SHA512
75ba6413a4990d8f44c6e4246f3d3c3cf799ff1a1cadcbb91181c2e4c8bcfb64316ae5b2cb765d5da3c0cdba192a0eb1e987264f88c3edad75cdcd48bad61473
-
SSDEEP
1536:ikFJXrbSESvAcpqp7/Fm3UQUSmEJ4cIKHwRisL/KRfNQcRd4B3gLh:FXrgqphQUfECpoyGlZRd4B3G
Malware Config
Signatures
Files
-
a9d95ddb94b49f48197b25a5edfbc7265c9abd91a6efccaec81353dd4c9388cc.exe windows x86
3697944a64a62226d23da3306d9467c8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
thumbs .db
MethCallEngine
ord516
ord666
ord595
ord598
ord520
ord631
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord716
ProcCallEngine
ord645
ord576
ord100
ord616
ord617
ord619
ord580
Sections
.text Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE