Static task
static1
Behavioral task
behavioral1
Sample
61b8e77fabc76f09ed5d2697331769e2acf9b2312a822064597f124dc97c03b4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
61b8e77fabc76f09ed5d2697331769e2acf9b2312a822064597f124dc97c03b4.exe
Resource
win10v2004-20221111-en
General
-
Target
61b8e77fabc76f09ed5d2697331769e2acf9b2312a822064597f124dc97c03b4
-
Size
516KB
-
MD5
eade39afc81618f2d549559cb6fff347
-
SHA1
a541f20f8eee2c9ad3ebc4fa90ffd53404755b36
-
SHA256
61b8e77fabc76f09ed5d2697331769e2acf9b2312a822064597f124dc97c03b4
-
SHA512
3b673e81cfe16625d9408be46e809cdf7413a6356657bb9a3d1ad76cb0759d0bc96b10ef8ea27ae8e1ab6481b346e7c804347f8dc1890e4be494b9f338401ef2
-
SSDEEP
12288:vlfKnyq1tPeW9oZA9mpmV39MOFF2ek2cxEXto1NhCG:l8ptT4qVtcek2aUC/hC
Malware Config
Signatures
Files
-
61b8e77fabc76f09ed5d2697331769e2acf9b2312a822064597f124dc97c03b4.exe windows x86
87e1eff45d4b9d65f275a3b510f16b63
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord598
ord520
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord607
ord608
ord717
ProcCallEngine
ord644
ord645
ord647
ord685
ord100
ord617
ord619
Sections
.text Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 484KB - Virtual size: 480KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ