Static task
static1
Behavioral task
behavioral1
Sample
f508334af0ede09941493dccdcd35062c3ce1851e9fdd7f72705e44f487ed085.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f508334af0ede09941493dccdcd35062c3ce1851e9fdd7f72705e44f487ed085.exe
Resource
win10v2004-20220812-en
General
-
Target
f508334af0ede09941493dccdcd35062c3ce1851e9fdd7f72705e44f487ed085
-
Size
20KB
-
MD5
2d6acbfa9458115b2a32f54002646a97
-
SHA1
af95d203cbeb7cb98c0ab4dddb850b92caf65bf2
-
SHA256
f508334af0ede09941493dccdcd35062c3ce1851e9fdd7f72705e44f487ed085
-
SHA512
fabd0c781850cfe2baca4bd115a2a68c10f27275e653c79ae12aad88fea9a7f143967688857d15caaf39ca6f12430f68f6342bc6004b06434aed857b24fc3546
-
SSDEEP
192:81W+E9Il5HStd7ra/dI0JC6AUsVTJKs9OTiAqQdj0z:810JtdT0Jv0uswTiAjdj0z
Malware Config
Signatures
Files
-
f508334af0ede09941493dccdcd35062c3ce1851e9fdd7f72705e44f487ed085.exe windows x86
9b242b37515725c75c37f5dad237ab17
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord690
ord583
ord585
MethCallEngine
ord518
ord709
ord632
ord525
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord608
ord609
ord717
ProcCallEngine
ord644
ord100
ord689
ord616
ord617
Sections
.text Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ