Static task
static1
Behavioral task
behavioral1
Sample
949b425882c4deb84f69d5d391025778ff323042fd791099428115056b3a84a4.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
949b425882c4deb84f69d5d391025778ff323042fd791099428115056b3a84a4.exe
Resource
win10v2004-20220901-en
General
-
Target
949b425882c4deb84f69d5d391025778ff323042fd791099428115056b3a84a4
-
Size
76KB
-
MD5
a5fd694210d2e1de6a2bb272383638c0
-
SHA1
58bac071ca1d797074747c006a8e374ff2377840
-
SHA256
949b425882c4deb84f69d5d391025778ff323042fd791099428115056b3a84a4
-
SHA512
1ab236fe079223b319a6ada260877afef1a5c9aab7e631b91f339a2a364a4b1aa808ac4c6b617a439bbf99938335f5fd561a13fe6288e4811519ba23ca580ece
-
SSDEEP
768:yLLBmLvlLAjpNMmCF8ZYdp9JL1qHAAagUOjtHkQyT00puyVjU9o/pljcv0eWZ/7e:yfUjlUjpamY8ZYd7rAG4kpfVySo
Malware Config
Signatures
Files
-
949b425882c4deb84f69d5d391025778ff323042fd791099428115056b3a84a4.exe windows x86
421ce846dd4d52fd142771a6167b97a6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord187
ord698
MethCallEngine
ord516
ord629
ord660
ord300
ord301
ord595
ord598
ord305
ord306
ord307
ord631
ord709
ord632
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
ord311
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord313
ord318
ord717
ProcCallEngine
ord536
ord644
ord573
ord575
ord685
ord100
ord687
ord613
ord617
ord581
Sections
.text Size: 68KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ