Static task
static1
Behavioral task
behavioral1
Sample
9362369f031794f965ab88eb987f53c9a4a423750203f81be2e79f15b2c82afb.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
9362369f031794f965ab88eb987f53c9a4a423750203f81be2e79f15b2c82afb.exe
Resource
win10v2004-20221111-en
General
-
Target
9362369f031794f965ab88eb987f53c9a4a423750203f81be2e79f15b2c82afb
-
Size
63KB
-
MD5
ecb41702b2c245c9a4d7f64a1af64766
-
SHA1
6d6cbdd548681243d25f6cbcc63bb875e945ddcf
-
SHA256
9362369f031794f965ab88eb987f53c9a4a423750203f81be2e79f15b2c82afb
-
SHA512
aefbd5f8c52e407dd720dd650d6e10095bf1147754e55a8730879a04ef2879e3864b443578a3569fd1b20dbda4da3fa32d4bebf6ba4262c3208012ed4c510cc4
-
SSDEEP
768:VdxbzPKLH8sh100CGHiPkZxUC7SFIOUvH8vPzP:VdtOL5WlGHik/oI1vMP
Malware Config
Signatures
Files
-
9362369f031794f965ab88eb987f53c9a4a423750203f81be2e79f15b2c82afb.exe windows x86
0337190921fbeab87892fb5adbde8bf1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord516
ord517
ord595
ord598
ord520
ord631
ord632
ord526
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord716
ProcCallEngine
ord536
ord645
ord681
ord576
ord685
ord100
ord616
ord617
ord619
ord580
Sections
.text Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 380KB - Virtual size: 380KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ytgppsi Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
frmwfwb Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE