Static task
static1
Behavioral task
behavioral1
Sample
804a485bbaa3d578179c67a80006c7ebc02eec21dd61580efe5cabb44c482537.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
804a485bbaa3d578179c67a80006c7ebc02eec21dd61580efe5cabb44c482537.exe
Resource
win10v2004-20221111-en
General
-
Target
804a485bbaa3d578179c67a80006c7ebc02eec21dd61580efe5cabb44c482537
-
Size
44KB
-
MD5
d4598840a058323aa5c66bdb6979c9a8
-
SHA1
7d6a1ce194e24ae14317aec5b2a5010faaa20416
-
SHA256
804a485bbaa3d578179c67a80006c7ebc02eec21dd61580efe5cabb44c482537
-
SHA512
c9b976611a292b6a5218a9d2737d78af53865304f69aca0bacd86da6d9a0c6c835e909eeb6a9c2d9be0e23417640f138ea44ef2c6b1ef5b20fffd623fbeda5ed
-
SSDEEP
384:pcuSiCeS5DF57fIDTbInIm2I+vsGFb2z4FbFMzY9Sl5ded4JzGvl/aLGHvohq5Ic:pc2Cutzzw9OHOhqaKe+avG89mmhr
Malware Config
Signatures
Files
-
804a485bbaa3d578179c67a80006c7ebc02eec21dd61580efe5cabb44c482537.exe windows x86
7dde988c5309cef785932789e02cf3cc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord516
ord666
ord595
ord631
ord632
ord525
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord717
ProcCallEngine
ord537
ord644
ord100
ord616
ord617
ord581
Sections
.text Size: 36KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ