Static task
static1
Behavioral task
behavioral1
Sample
15daea6f00191a6fafd7dc8692669252c4e1080e548c1971dc68edc4c319a84c.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
15daea6f00191a6fafd7dc8692669252c4e1080e548c1971dc68edc4c319a84c.exe
Resource
win10v2004-20220901-en
General
-
Target
15daea6f00191a6fafd7dc8692669252c4e1080e548c1971dc68edc4c319a84c
-
Size
272KB
-
MD5
68f8cdab7dd87128507520dd35387736
-
SHA1
3a8eb6347446e1f1c912c46bf438dd707a9d85a6
-
SHA256
15daea6f00191a6fafd7dc8692669252c4e1080e548c1971dc68edc4c319a84c
-
SHA512
cf21f227467c73af52930f9c5e68019b5894459439c2e0eba75f964dc266c5a3830b153a7369857441d7c7cdd89d65ae1003fe6b16c00b0f774fbe1624ad3151
-
SSDEEP
3072:NRyM68NgtWHzaqBtmKOqNRkQUG7opA83KPj/1yBFfJp1m:TyM6yHt66i3pAGKPj/1yB9j1m
Malware Config
Signatures
Files
-
15daea6f00191a6fafd7dc8692669252c4e1080e548c1971dc68edc4c319a84c.exe windows x86
6322986046a3df5a24361ae1f9e57932
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord692
ord187
ord588
MethCallEngine
ord516
ord517
ord518
ord519
ord660
ord668
ord669
ord593
ord595
ord598
ord520
ord306
ord307
ord709
ord631
ord525
EVENT_SINK_AddRef
ord527
ord529
DllFunctionCall
ord670
ord678
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord318
ord717
ProcCallEngine
ord535
ord536
ord537
ord644
ord645
ord570
ord571
ord572
ord681
ord575
ord578
ord100
ord616
ord617
ord618
ord619
ord546
ord581
Sections
.text Size: 188KB - Virtual size: 184KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 80KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ