Static task
static1
Behavioral task
behavioral1
Sample
6c16ef00332b18e698881af2877e681e6b67717bb51fc1edb3cd894bea8054e1.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
6c16ef00332b18e698881af2877e681e6b67717bb51fc1edb3cd894bea8054e1.exe
Resource
win10v2004-20220812-en
General
-
Target
6c16ef00332b18e698881af2877e681e6b67717bb51fc1edb3cd894bea8054e1
-
Size
82KB
-
MD5
8321dc3b5d9c3e85fca91710680b6530
-
SHA1
cae8045b4eb649e48dacb6c3e8cabf5aac72b0c3
-
SHA256
6c16ef00332b18e698881af2877e681e6b67717bb51fc1edb3cd894bea8054e1
-
SHA512
30355bdea760ad764cdf517efb7259735f9af42a1ba7cd3e961c529b71aac96de63cca11359dee673df9330c5697d56388484ac76dd824105b94aa3f87186374
-
SSDEEP
1536:IW0i5O04BljDqJGcgKRB4vWOZcH7sJmU7CpaA6gLc:XOJqJf34ZcH7u7c6g
Malware Config
Signatures
Files
-
6c16ef00332b18e698881af2877e681e6b67717bb51fc1edb3cd894bea8054e1.exe windows x86
398df3e18882a1e88f77548afa220cd7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
SHBrowseForFolder
msvbvm60
ord183
MethCallEngine
ord552
ord669
ord630
EVENT_SINK_AddRef
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord570
ord100
ord432
ord540
Sections
.text Size: 70KB - Virtual size: 70KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 388B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ