Static task
static1
Behavioral task
behavioral1
Sample
fad1a71bb615d14bdec811631915cf130f2b3f3bd7e63795cc8aca2d74efa108.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fad1a71bb615d14bdec811631915cf130f2b3f3bd7e63795cc8aca2d74efa108.exe
Resource
win10v2004-20220812-en
General
-
Target
fad1a71bb615d14bdec811631915cf130f2b3f3bd7e63795cc8aca2d74efa108
-
Size
24KB
-
MD5
0b7139a3878ab3fd6d5a0e1a994c32c2
-
SHA1
4086ab48f2a2cc6813b5e5e6d8f78f20f927a900
-
SHA256
fad1a71bb615d14bdec811631915cf130f2b3f3bd7e63795cc8aca2d74efa108
-
SHA512
58d23cdf67ec4e6d4bff2c8cae41d19db138f2858133c554431e986e01f81bc7b7a47cec3eb950a25ff8ad5dfbfce08160c473412e17c009a6df2d8e904b8281
-
SSDEEP
384:eNun0YN7b46+xU43BtgiiHEMBtuTn7O4hZEbxw:Ku0p6ANiJmBzEm
Malware Config
Signatures
Files
-
fad1a71bb615d14bdec811631915cf130f2b3f3bd7e63795cc8aca2d74efa108.exe windows x86
2b675bc84a22864f230a8789a2462768
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord585
ord187
ord587
MethCallEngine
ord516
ord661
ord306
ord307
ord631
ord709
ord632
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord318
ord717
ProcCallEngine
ord644
ord645
ord100
ord687
ord616
ord541
Sections
.text Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ