Static task
static1
Behavioral task
behavioral1
Sample
bdfab4e6424c69445b5859b5b38bad4ab2be01f3c6025abe604354b0455636fa.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bdfab4e6424c69445b5859b5b38bad4ab2be01f3c6025abe604354b0455636fa.exe
Resource
win10v2004-20221111-en
General
-
Target
bdfab4e6424c69445b5859b5b38bad4ab2be01f3c6025abe604354b0455636fa
-
Size
20KB
-
MD5
a21dfcafa154935a33950e2f09de390c
-
SHA1
7bcea82938ebc893e0711d0e6b7ac1336b21f5d1
-
SHA256
bdfab4e6424c69445b5859b5b38bad4ab2be01f3c6025abe604354b0455636fa
-
SHA512
71f531606cb97410d23ff2cbf9b1a6ae7d9f2639df6e6c452a32b5e0e1331957b15e45c16ef4cfb766b4c2db60764e000b9fbf97796738027dd7adcb40a23a7f
-
SSDEEP
192:C0W2+gTWvGfG3CYwJygPfgCMiTwlbMzN8LMAsT93YOUdc0XFX:3W4xfICWggAU3MAsT93YOUC0XFX
Malware Config
Signatures
Files
-
bdfab4e6424c69445b5859b5b38bad4ab2be01f3c6025abe604354b0455636fa.exe windows x86
1187cf66ca7ab6c400a300f74464c9c9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord690
ord693
MethCallEngine
ord516
ord709
ord525
ord632
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord714
ord717
ProcCallEngine
ord644
ord100
ord689
ord610
ord616
ord617
Sections
.text Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ