Static task
static1
Behavioral task
behavioral1
Sample
d4e17ff4019a066ebf06b93cb263497edd1e7521afcefd7c98ff739d6ec0aafe.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d4e17ff4019a066ebf06b93cb263497edd1e7521afcefd7c98ff739d6ec0aafe.exe
Resource
win10v2004-20220901-en
General
-
Target
d4e17ff4019a066ebf06b93cb263497edd1e7521afcefd7c98ff739d6ec0aafe
-
Size
196KB
-
MD5
a9b35462a9d38e4f0ab5a6ea3ab7755a
-
SHA1
c899f5868c98cb2e445fa7de68e8aec473d98a9d
-
SHA256
d4e17ff4019a066ebf06b93cb263497edd1e7521afcefd7c98ff739d6ec0aafe
-
SHA512
5b843a1b58d2b2d460c31768948636d2435b0956737efaa40f44ca7276ca3de4618afdefec8cef498db98a886b810ec0917378247e5f6b4468bb4b9e27af174a
-
SSDEEP
6144:cdJvZozvMXKNr0hHlb0Ju7gcWfVtnHCLv:cvvZNXKx0V7gpHCLv
Malware Config
Signatures
Files
-
d4e17ff4019a066ebf06b93cb263497edd1e7521afcefd7c98ff739d6ec0aafe.exe windows x86
1d2a1c4323e03b9a336a7ff402a45915
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord516
ord595
ord598
ord631
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord644
ord537
ord681
ord578
ord100
ord616
ord581
Sections
.text Size: 88KB - Virtual size: 87KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.u3BS Size: 100KB - Virtual size: 100KB