Static task
static1
Behavioral task
behavioral1
Sample
af228bf68b265955824b26fa8f69348acf68702b91060ee7d2c398f9225a626c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
af228bf68b265955824b26fa8f69348acf68702b91060ee7d2c398f9225a626c.exe
Resource
win10v2004-20220812-en
General
-
Target
af228bf68b265955824b26fa8f69348acf68702b91060ee7d2c398f9225a626c
-
Size
65KB
-
MD5
a49202b81dbe1295585d0f2d33fb472b
-
SHA1
ea6eadd719efbfbc74565b0c270febd0490a070a
-
SHA256
af228bf68b265955824b26fa8f69348acf68702b91060ee7d2c398f9225a626c
-
SHA512
0b78b05572460ad812820f4f513e6d11d314f1950bb2f2caacff36b37671e00bc631e88f23fb9ebf4ba22f8a3897bc99c9ae3cc847265402e7e5abdd187f559d
-
SSDEEP
768:1ZbhP1M4FRt/vFAsZQ224TNNhRrQmfp7aYBTuPzCdIhO6jjqD1ktkn:1ZdK4FRt/vFAsG22GR0TLfLqD1kty
Malware Config
Signatures
Files
-
af228bf68b265955824b26fa8f69348acf68702b91060ee7d2c398f9225a626c.exe windows x86
d643281f1d53b29b16bd86ec34db9114
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord697
MethCallEngine
ord516
ord550
ord595
ord598
ord631
ord632
ord525
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord608
ord609
ord716
ord717
ProcCallEngine
ord535
ord537
ord644
ord645
ord570
ord576
ord685
ord100
ord611
ord616
ord617
ord618
ord581
Sections
.text Size: 56KB - Virtual size: 54KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ