Static task
static1
Behavioral task
behavioral1
Sample
6f95570340533aec0a526770de7003f1fcfc3090f81092430d97ecfab9347244.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
6f95570340533aec0a526770de7003f1fcfc3090f81092430d97ecfab9347244.exe
Resource
win10v2004-20221111-en
General
-
Target
6f95570340533aec0a526770de7003f1fcfc3090f81092430d97ecfab9347244
-
Size
168KB
-
MD5
24e96d8327d4371919fcff7b94975260
-
SHA1
03041128c13f77d2db135e90b935074d4933e848
-
SHA256
6f95570340533aec0a526770de7003f1fcfc3090f81092430d97ecfab9347244
-
SHA512
23f13f1c84e9a7f66767d3967fd7934c9122882764bdedb1c83c69aba4d3752ed426f888c00c8db9d3f77918b8ef3dbf8b8558ae47f27eaf9977064ef7a8a0c4
-
SSDEEP
1536:4VTy3/PPqPNzTGRfu+1niPRI7gIeTo88zQMihZOy+RMnmE7UkANJZvhICqDojhq:0kPqPNzTGRfu67bNz2hT9nmEnSq
Malware Config
Signatures
Files
-
6f95570340533aec0a526770de7003f1fcfc3090f81092430d97ecfab9347244.exe windows x86
486543d5533ea9dc5794df9380b61c45
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord582
ord583
ord585
ord187
ord588
MethCallEngine
ord516
ord517
ord518
ord519
ord598
ord704
ord520
ord631
ord709
ord632
EVENT_SINK_AddRef
ord527
ord528
DllFunctionCall
ord670
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord714
ord607
ord608
ord717
ProcCallEngine
ord535
ord537
ord644
ord645
ord539
ord573
ord681
ord685
ord578
ord100
ord579
ord614
ord616
ord617
ord618
ord619
Sections
.text Size: 144KB - Virtual size: 141KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ