Static task
static1
Behavioral task
behavioral1
Sample
f655495c481952228cb997a3f21365a77821f2a877b5d48856d38bc648aec78f.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f655495c481952228cb997a3f21365a77821f2a877b5d48856d38bc648aec78f.exe
Resource
win10v2004-20220812-en
General
-
Target
f655495c481952228cb997a3f21365a77821f2a877b5d48856d38bc648aec78f
-
Size
172KB
-
MD5
648c45e04bf16f96d682f061fb2d647e
-
SHA1
3f8ece1cf1f52fd78d2497762f6898fd1079fef3
-
SHA256
f655495c481952228cb997a3f21365a77821f2a877b5d48856d38bc648aec78f
-
SHA512
e742247c306900d2dcf6eff3d76effd1abfa21f77b158907c4e9d9d32c71f8da8387bf63137ec2c76f32e3a65d221abf55d5cd58c45e60f975a6aea165940386
-
SSDEEP
768:DWTkFFHggtmanmkAEuSLv7bRc55C609K4Ii99PGWGRvsishCl5BvNlCWPhKX2oK9:UkFJggbmPSLRI3i3PkdsiD9v9gz6
Malware Config
Signatures
Files
-
f655495c481952228cb997a3f21365a77821f2a877b5d48856d38bc648aec78f.exe windows x86
3697944a64a62226d23da3306d9467c8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
thumbs .db
MethCallEngine
ord516
ord666
ord595
ord598
ord520
ord631
ord526
EVENT_SINK_AddRef
ord528
ord529
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ord716
ProcCallEngine
ord645
ord576
ord100
ord616
ord617
ord619
ord580
Sections
.text Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 144KB - Virtual size: 144KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE