Static task
static1
Behavioral task
behavioral1
Sample
b54389567bbcd8bb3471441f3a8de60c77820bb9899cf05f106554b1950bcb89.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b54389567bbcd8bb3471441f3a8de60c77820bb9899cf05f106554b1950bcb89.exe
Resource
win10v2004-20220812-en
General
-
Target
b54389567bbcd8bb3471441f3a8de60c77820bb9899cf05f106554b1950bcb89
-
Size
192KB
-
MD5
3fb936159bfc97a29e37c93dac547d64
-
SHA1
9eea2e8d0cb8bcf71b3beee8171c633f9fa7bdb0
-
SHA256
b54389567bbcd8bb3471441f3a8de60c77820bb9899cf05f106554b1950bcb89
-
SHA512
3c6eaa7d2e631757de65fe355c6c4abe030effcec504d3b181394bf13deda13b9e224db0db050fcc39805365bacdf25f17aad79c9faaee10db81fbdc698d3888
-
SSDEEP
3072:573KloQSrkKgRENEI5apGTwQqVMTW0hiJAkrD9CXp0F+6VKd7MxdthcX8eO:ZvqQ6VKNMxdthcX8J
Malware Config
Signatures
Files
-
b54389567bbcd8bb3471441f3a8de60c77820bb9899cf05f106554b1950bcb89.exe windows x86
a54a76b55f3c84bb2577d950442b8e4d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord696
MethCallEngine
ord516
ord628
ord631
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord608
ProcCallEngine
ord644
ord537
ord573
ord1
ord619
Sections
.text Size: 144KB - Virtual size: 140KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ