Static task
static1
Behavioral task
behavioral1
Sample
b6eea25112d36f76c41c324249167a835e77a425e4836117340c9e6f43518a02.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b6eea25112d36f76c41c324249167a835e77a425e4836117340c9e6f43518a02.exe
Resource
win10v2004-20221111-en
General
-
Target
b6eea25112d36f76c41c324249167a835e77a425e4836117340c9e6f43518a02
-
Size
317KB
-
MD5
992f8e07bcfa9a5ee1fd25d1441d9407
-
SHA1
1e3f2a6b9fc588db0cf4b37261a5965b730ea3b1
-
SHA256
b6eea25112d36f76c41c324249167a835e77a425e4836117340c9e6f43518a02
-
SHA512
1fe1401f7b2cb40585d4ee1aa3077621ba2c9caf49828e405a51014522ea9b47d3773bda69f62a9a56c08b54d4c4e72d223a2520b35eacef34919f02415e27ff
-
SSDEEP
3072:dQw5PDykjCMu2hypK7D6zd23+P+kdMT0LRD68wbYNRx4hwbM8WRDMHwWIjYox5OS:dqlD68wsHxrY8sDMQEoXYfA8h+ghny
Malware Config
Signatures
Files
-
b6eea25112d36f76c41c324249167a835e77a425e4836117340c9e6f43518a02.exe windows x86
2fb1c319a1b72cd4896946e05ff6bdcc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord696
MethCallEngine
ord626
ord628
ord666
ord631
ord526
EVENT_SINK_AddRef
ord528
DllFunctionCall
ord562
ord563
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord717
ProcCallEngine
ord644
ord572
ord100
ord617
Sections
.text Size: 160KB - Virtual size: 158KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ultra Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ