Static task
static1
Behavioral task
behavioral1
Sample
27bf15e78dcaa72de04a221b60851895f6f2091ef7a6ddaebd63d06130f74d62.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
27bf15e78dcaa72de04a221b60851895f6f2091ef7a6ddaebd63d06130f74d62.exe
Resource
win10v2004-20220812-en
General
-
Target
27bf15e78dcaa72de04a221b60851895f6f2091ef7a6ddaebd63d06130f74d62
-
Size
120KB
-
MD5
121c20a0047526482e5baec0297d86c0
-
SHA1
168ea5439179161fe7b6c5196615d1079da67ae5
-
SHA256
27bf15e78dcaa72de04a221b60851895f6f2091ef7a6ddaebd63d06130f74d62
-
SHA512
b1643dafdf66e4d0c7ab1049b6c2dc68a6598f3eb20cd0578e6ef74bb0ec3f21366fd646ad4334ed375dbf2e34767a0c75ce79c2ab997bd176de2fed2a359757
-
SSDEEP
1536:fFov0KP1ZVYd1Ulf9jrlT+40ohnoBlCQOdFXPcMGSaXyxhPGM:dob/VYd1UZpla40oqlCQO7XPcq
Malware Config
Signatures
Files
-
27bf15e78dcaa72de04a221b60851895f6f2091ef7a6ddaebd63d06130f74d62.exe windows x86
1326d105266ea53b0284ea1cae6bc57f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CreatePopupMenu
msvbvm60
ord582
ord583
ord690
ord584
ord585
ord187
ord588
MethCallEngine
ord516
ord518
ord660
ord593
ord594
ord520
ord306
ord307
ord524
ord631
ord709
ord632
ord526
EVENT_SINK_AddRef
ord528
ord529
ord562
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord710
ord711
ord607
ord608
ord716
ord717
ord318
ProcCallEngine
ord644
ord645
ord570
ord648
ord573
ord681
ord578
ord685
ord100
ord614
ord617
ord619
ord652
ord581
Sections
.text Size: 112KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ