Static task
static1
Behavioral task
behavioral1
Sample
671bd8ef688ebeb2b6cfe45c2fd4fb1edf28ab25bfa67f0abfac9d4f1059b63d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
671bd8ef688ebeb2b6cfe45c2fd4fb1edf28ab25bfa67f0abfac9d4f1059b63d.exe
Resource
win10v2004-20221111-en
General
-
Target
671bd8ef688ebeb2b6cfe45c2fd4fb1edf28ab25bfa67f0abfac9d4f1059b63d
-
Size
148KB
-
MD5
627247e960aebf36a834008be778e5f0
-
SHA1
cdccf9379ae7d76f4584853c7b68b1c76d29318b
-
SHA256
671bd8ef688ebeb2b6cfe45c2fd4fb1edf28ab25bfa67f0abfac9d4f1059b63d
-
SHA512
9b6187cce9c43879a96c3d8d03c816288ddc97232408f85e1a5950e8916e2a43eed8aeffeb34f85cc992c6ed00b2adf81699720f282ff13a3490f7d07a922332
-
SSDEEP
1536:QBeaxAhsGXkR1SV++mRR0cL+iOJsz5czE4M52BoSHvSC3T4Gx4MZ+VSA:MH1rZRRTLz5cg4aY+IA
Malware Config
Signatures
Files
-
671bd8ef688ebeb2b6cfe45c2fd4fb1edf28ab25bfa67f0abfac9d4f1059b63d.exe windows x86
9339e870ca9db70bb20abe7dc66a9e5c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord187
MethCallEngine
ord515
ord516
ord517
ord518
ord519
ord593
ord300
ord595
ord598
ord306
ord520
ord307
ord709
ord631
ord632
EVENT_SINK_AddRef
ord527
ord528
DllFunctionCall
ord670
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord608
ord318
ord717
ProcCallEngine
ord535
ord537
ord644
ord645
ord539
ord571
ord649
ord681
ord578
ord100
ord579
ord614
ord616
ord617
ord618
ord619
ord542
ord544
Sections
.text Size: 124KB - Virtual size: 122KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE