Static task
static1
Behavioral task
behavioral1
Sample
73f09b8166b10a7a155650adf32dba80b69e424f3823875298f4363abed5ba49.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
73f09b8166b10a7a155650adf32dba80b69e424f3823875298f4363abed5ba49.exe
Resource
win10v2004-20221111-en
General
-
Target
73f09b8166b10a7a155650adf32dba80b69e424f3823875298f4363abed5ba49
-
Size
126KB
-
MD5
9c3ad455045510ef6e4840c34fa7d220
-
SHA1
7ab98714ff9af0e6b90aa5d8a4e27ed8e50228bf
-
SHA256
73f09b8166b10a7a155650adf32dba80b69e424f3823875298f4363abed5ba49
-
SHA512
e087e248bf4915485550ca2b4f646c62743cb7a2c1487eabfe256c15d2b2059683c3ed4c6908ac66b99c3c2e1906fda04a473099eb04f73e256fdf3e542ae4de
-
SSDEEP
3072:OQpfI0j541W3FxAu3Vo1bGt9u7nvvHD1e9HCGyQx28:tCoyZTvHDc9HCGw8
Malware Config
Signatures
Files
-
73f09b8166b10a7a155650adf32dba80b69e424f3823875298f4363abed5ba49.exe windows x86
dcb16906cb93db56486141110d461ec0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
pstorec
PStoreCreateInstance
msvbvm60
MethCallEngine
ord516
ord518
ord666
ord667
ord520
ord631
ord525
ord632
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord608
ord717
ProcCallEngine
ord537
ord644
ord645
ord570
ord571
ord572
ord100
ord616
ord617
ord619
ord581
Sections
.text Size: 52KB - Virtual size: 50KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 172KB - Virtual size: 171KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ