Static task
static1
Behavioral task
behavioral1
Sample
424b065d20d748654256c13a2895dfc131415b8defece831a59594784abc598f.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
424b065d20d748654256c13a2895dfc131415b8defece831a59594784abc598f.exe
Resource
win10v2004-20220812-en
General
-
Target
424b065d20d748654256c13a2895dfc131415b8defece831a59594784abc598f
-
Size
84KB
-
MD5
8507cf8ce167e064fd20a1a21cf40402
-
SHA1
7b7665ea70f81647a989934ac6d0a3a1b0f323a6
-
SHA256
424b065d20d748654256c13a2895dfc131415b8defece831a59594784abc598f
-
SHA512
1b3ae5003a49ea5d66a5928070e494ba55848514d303572101afb7b4cc259dff395c5596eb788962833093d1b5d052f8bcc95a7da34112a157304b67dd62e8f9
-
SSDEEP
1536:vuWQxUwW2aEyabmCSnVEbp3TxpuqEPTUlebzYzYMc9con7UX2sXG:tekElmCSmFDvuAlgsXG
Malware Config
Signatures
Files
-
424b065d20d748654256c13a2895dfc131415b8defece831a59594784abc598f.exe windows x86
7500b9cf155ecabffddc272113068f7c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord187
MethCallEngine
ord516
ord553
ord595
ord306
ord307
ord709
ord631
ord632
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord318
ord717
ord319
ProcCallEngine
ord644
ord570
ord648
ord573
ord685
ord578
ord100
ord320
ord321
ord617
ord541
ord581
Sections
.text Size: 76KB - Virtual size: 73KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ