Static task
static1
Behavioral task
behavioral1
Sample
8b1d4b1274c23ecfb954557f3c65496bfd3098afb41e4f6df54beb2cacc834e8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8b1d4b1274c23ecfb954557f3c65496bfd3098afb41e4f6df54beb2cacc834e8.exe
Resource
win10v2004-20221111-en
General
-
Target
8b1d4b1274c23ecfb954557f3c65496bfd3098afb41e4f6df54beb2cacc834e8
-
Size
220KB
-
MD5
f1d1572c4947e8794908cd8eb1b8695c
-
SHA1
514456f5ea5a8484085ed1a46b854d02f91e907b
-
SHA256
8b1d4b1274c23ecfb954557f3c65496bfd3098afb41e4f6df54beb2cacc834e8
-
SHA512
8f7dd2088478bccfd445f0dd8c0bfa0ef39417a1848c2de7282437a18a5d26983bf975e4979842a221e33d145884d2d2e1370161676f51f680f15b7fd2965230
-
SSDEEP
3072:gqStwfwPoiWGAk7cHoq5YkLg6uP6s4FjKiTG:gpmGncHoPcWg
Malware Config
Signatures
Files
-
8b1d4b1274c23ecfb954557f3c65496bfd3098afb41e4f6df54beb2cacc834e8.exe windows x86
ab9f05af324330fc413c2c330a2b73e6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord516
ord631
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ord717
ProcCallEngine
ord537
ord644
ord572
ord100
ord616
ord618
ord581
Sections
.text Size: 188KB - Virtual size: 187KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ