Static task
static1
Behavioral task
behavioral1
Sample
831ec08a6b6532e43fbc0456051340c580f155cced394bda663bbf378cda39ca.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
831ec08a6b6532e43fbc0456051340c580f155cced394bda663bbf378cda39ca.exe
Resource
win10v2004-20221111-en
General
-
Target
831ec08a6b6532e43fbc0456051340c580f155cced394bda663bbf378cda39ca
-
Size
392KB
-
MD5
0f34e8a5cde9bd94a00d4dbb29164d54
-
SHA1
ed112d352564f78dc7250b6f623849e2dbef7cd4
-
SHA256
831ec08a6b6532e43fbc0456051340c580f155cced394bda663bbf378cda39ca
-
SHA512
f0a9ff33dc40166d61b131960c02326b34edf002fe8569bd5ab58ee22ec4cba17e67b4c9027318db1379c987329e28cc535c0dc821fa7d86d475a759ddf74b50
-
SSDEEP
3072:Zn3Xio5rkfXlydyowBcqCksRp9IILZ9U652V4l4aAeHjw68Ywajih0aU4nVNz30G:ZbORJSjUEFPeNSFPwjU
Malware Config
Signatures
Files
-
831ec08a6b6532e43fbc0456051340c580f155cced394bda663bbf378cda39ca.exe windows x86
9d46f3c36b503098a5fe018365194fac
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord696
ord516
ord628
ord709
ord631
EVENT_SINK_AddRef
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord717
ProcCallEngine
ord644
ord537
ord100
ord616
Sections
.text Size: 244KB - Virtual size: 240KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 144KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ