Static task
static1
Behavioral task
behavioral1
Sample
d9a7f68fe4ea6025725fb9c8ffa44cc43d45cca39ca16065f21ff67a29fecb64.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d9a7f68fe4ea6025725fb9c8ffa44cc43d45cca39ca16065f21ff67a29fecb64.exe
Resource
win10v2004-20221111-en
General
-
Target
d9a7f68fe4ea6025725fb9c8ffa44cc43d45cca39ca16065f21ff67a29fecb64
-
Size
200KB
-
MD5
c2dae09517c9bc11095c591b89366483
-
SHA1
f9a4bd214c4ed8a11a0f914edc030ea3f063e1bd
-
SHA256
d9a7f68fe4ea6025725fb9c8ffa44cc43d45cca39ca16065f21ff67a29fecb64
-
SHA512
f1b5788fb33ce126049eeff3d3ad8c85e2603be17abab013caea43f4501ae0e2dead8b6a5e0161db90902c985f3b425eabe83ada1baa709ff728139b06ced8cd
-
SSDEEP
3072:OCnTo/0YxlN0tQ9nLHbB9WPliBs2HWWEakGJm9Qg:OCe54QxL7B9WPli+yWWEaza
Malware Config
Signatures
Files
-
d9a7f68fe4ea6025725fb9c8ffa44cc43d45cca39ca16065f21ff67a29fecb64.exe windows x86
67c6cea725dad28f2fc079da02446256
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord187
ord588
MethCallEngine
ord516
ord517
ord518
ord519
ord669
ord593
ord300
ord594
ord598
ord306
ord520
ord631
ord709
ord525
ord632
EVENT_SINK_AddRef
ord527
ord528
DllFunctionCall
ord564
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord607
ord608
ord717
ProcCallEngine
ord535
ord537
ord644
ord645
ord647
ord573
ord681
ord578
ord100
ord579
ord616
ord617
ord618
ord619
ord581
Sections
.text Size: 176KB - Virtual size: 173KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ