Static task
static1
Behavioral task
behavioral1
Sample
81791312b1c1711ea9cf447ccb9be4f0155e4c8ee55b7cfa61e15f08ea27f398.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
81791312b1c1711ea9cf447ccb9be4f0155e4c8ee55b7cfa61e15f08ea27f398.exe
Resource
win10v2004-20220812-en
General
-
Target
81791312b1c1711ea9cf447ccb9be4f0155e4c8ee55b7cfa61e15f08ea27f398
-
Size
76KB
-
MD5
ff9248e618741b2c1e15ef94150c0eb0
-
SHA1
3c9cb92f8efcec5a055420263b6620d78917d2ac
-
SHA256
81791312b1c1711ea9cf447ccb9be4f0155e4c8ee55b7cfa61e15f08ea27f398
-
SHA512
c87e82d7b8ab9cfba4b63cb00535e78341cdc92bd66494ac5615def055e729c8e38fd82f729e4a8799ef5cf178ff8550ee5eec4fb1ea9f80e12b0108462607cd
-
SSDEEP
1536:8HTCth3TB9kGJlcwc04odg/rmy5+PM5o:8HTK3T/kOlLQod6myIPM5o
Malware Config
Signatures
Files
-
81791312b1c1711ea9cf447ccb9be4f0155e4c8ee55b7cfa61e15f08ea27f398.exe windows x86
c68511194c8c9e4cf66795e1b49c0bf9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord588
MethCallEngine
ord516
ord593
ord594
ord595
ord303
ord309
ord631
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord606
ord713
ord608
ord717
ord319
ProcCallEngine
ord644
ord537
ord570
ord681
ord685
ord100
ord320
ord321
ord616
ord617
ord619
Sections
.text Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ