Static task
static1
Behavioral task
behavioral1
Sample
a58fbd240b03fcd4c7c43f21f6f50e7480a2239c962789182815a243792c0b77.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a58fbd240b03fcd4c7c43f21f6f50e7480a2239c962789182815a243792c0b77.exe
Resource
win10v2004-20221111-en
General
-
Target
a58fbd240b03fcd4c7c43f21f6f50e7480a2239c962789182815a243792c0b77
-
Size
74KB
-
MD5
45a1169b8982ff68812f7bbf5045bf30
-
SHA1
3a169b5cd435a57f9e63f2a3804295714cbff068
-
SHA256
a58fbd240b03fcd4c7c43f21f6f50e7480a2239c962789182815a243792c0b77
-
SHA512
9c647591ae671e205d045e6f397690adff7fa7630ff7c937780ff33839469bbc0f8d3164c76aa50037ed10259492059b4a08e5fa8236b58c6aa33265afc97c1d
-
SSDEEP
768:7LLJKduxBuVtOoCrIXo6BjZDpx0pcTV6oI+DYbJKRRmWNQt:3LEddtOoCZ6B1p6GDYoRR/Q
Malware Config
Signatures
Files
-
a58fbd240b03fcd4c7c43f21f6f50e7480a2239c962789182815a243792c0b77.exe windows x86
6384e81459d9316fcb0e41873c1ca2f7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
AreAnyAccessesGranted
msvbvm60
ord183
ord589
ord698
MethCallEngine
ord518
ord558
ord631
ord632
ord526
EVENT_SINK_AddRef
ord527
ord528
ord562
DllFunctionCall
ord563
ord678
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord717
ProcCallEngine
ord644
ord647
ord570
ord681
ord100
ord432
Sections
.text Size: 63KB - Virtual size: 63KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ