Static task
static1
Behavioral task
behavioral1
Sample
dcf2a6c64e05878bb3183056b26dc1dc91554e7219d22b1b87c9e8dd246babe2.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
dcf2a6c64e05878bb3183056b26dc1dc91554e7219d22b1b87c9e8dd246babe2.exe
Resource
win10v2004-20221111-en
General
-
Target
dcf2a6c64e05878bb3183056b26dc1dc91554e7219d22b1b87c9e8dd246babe2
-
Size
24KB
-
MD5
82ae2737991e09b3e6f17d974c484772
-
SHA1
27a73ee52cf63fb5faaa44753378368b2cd4cc4c
-
SHA256
dcf2a6c64e05878bb3183056b26dc1dc91554e7219d22b1b87c9e8dd246babe2
-
SHA512
ad5d4140780fccf25408b93eb20ce1246b21d2cdfa3f07372b98d177c434c4cc0656222c78b75bd80a6b243f7896753a5397bf892bfade3b138c4deae655de31
-
SSDEEP
384:hdVeXwu7L5874vyHDXtmhQyIVuvF0hFvhKUcZEdrpP6rd8eG:hPeAu7t1sXtWhd0hFvhKUcZEdVird8e
Malware Config
Signatures
Files
-
dcf2a6c64e05878bb3183056b26dc1dc91554e7219d22b1b87c9e8dd246babe2.exe windows x86
a9f15f4aadefa41235fbf0faf5612387
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord690
ord695
ord696
ord698
MethCallEngine
ord522
ord630
ord631
ord709
ord525
ord526
EVENT_SINK_AddRef
ord527
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord644
ord648
ord100
ord689
ord610
ord614
ord617
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ