Static task
static1
Behavioral task
behavioral1
Sample
85b5870c67658f99994a3be74778b98bcd58c204c0fdf0fd2aaafb5b80af383b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
85b5870c67658f99994a3be74778b98bcd58c204c0fdf0fd2aaafb5b80af383b.exe
Resource
win10v2004-20220901-en
General
-
Target
85b5870c67658f99994a3be74778b98bcd58c204c0fdf0fd2aaafb5b80af383b
-
Size
288KB
-
MD5
9077c3cff93ceef6fbc1db428d40c8b1
-
SHA1
6fa1bb03e816b45b6cdece91e076b36e75dbea67
-
SHA256
85b5870c67658f99994a3be74778b98bcd58c204c0fdf0fd2aaafb5b80af383b
-
SHA512
3d96c841391b4e172565aad8d1b4a004cc0ba7913fae51cf07c5534be15ce574a8c073ab3014ffd688e9476c414fab3d806c264a0470394f0b137f4f66f1ef41
-
SSDEEP
3072:4d23v7I/cu/c7dbnbnzncnGnVntnqnhnKnxnqn7nbnan7n3nbnonhnxnc:ewI/cu/c7
Malware Config
Signatures
Files
-
85b5870c67658f99994a3be74778b98bcd58c204c0fdf0fd2aaafb5b80af383b.exe windows x86
352682c7f4b061ef7f53f761234e1385
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord187
MethCallEngine
ord517
ord518
ord593
ord594
ord598
ord520
ord632
EVENT_SINK_AddRef
ord527
ord528
ord564
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord607
ord608
ord717
ProcCallEngine
ord537
ord644
ord645
ord648
ord570
ord681
ord100
ord431
ord616
ord617
ord619
Sections
.text Size: 280KB - Virtual size: 277KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ