Static task
static1
Behavioral task
behavioral1
Sample
f7dafa98765a587d6a563479a61da017f271c5f7795b35ad62ca3678b32791bd.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f7dafa98765a587d6a563479a61da017f271c5f7795b35ad62ca3678b32791bd.exe
Resource
win10v2004-20221111-en
General
-
Target
f7dafa98765a587d6a563479a61da017f271c5f7795b35ad62ca3678b32791bd
-
Size
368KB
-
MD5
146e7c0222047654df6519b988d53f0b
-
SHA1
582b9bd4f0ef976f5e69cd8978d7b6e8418c026f
-
SHA256
f7dafa98765a587d6a563479a61da017f271c5f7795b35ad62ca3678b32791bd
-
SHA512
e29d7f03ed45a8159a1d300a0e460285913124b2d25787e7ed391d4a0419236f87b564ac7180eb48463dd2e0c33173600ca49bf5d1dffdee306481bc1579ca8c
-
SSDEEP
3072:6KxewT3hQB8EcIV6T5A2yfP78RgXL1POJxihjIG6ErS5R8Bzt:xzCPmspJl2e
Malware Config
Signatures
Files
-
f7dafa98765a587d6a563479a61da017f271c5f7795b35ad62ca3678b32791bd.exe windows x86
e6d313df31daa6f35903331942f18cd2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord629
ord592
EVENT_SINK_AddRef
DllFunctionCall
ord564
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ProcCallEngine
ord537
ord100
Sections
.text Size: 356KB - Virtual size: 353KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ