Static task
static1
Behavioral task
behavioral1
Sample
5a389c250e37835dae804604be22417ddf281944f34a5ba545336a1433c14ae7.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
5a389c250e37835dae804604be22417ddf281944f34a5ba545336a1433c14ae7.exe
Resource
win10v2004-20220812-en
General
-
Target
5a389c250e37835dae804604be22417ddf281944f34a5ba545336a1433c14ae7
-
Size
64KB
-
MD5
98504a52527c8fa6987c9d45ccd430c8
-
SHA1
9ae345f9c3c64c51157d91739ec8a853f0f3e8d7
-
SHA256
5a389c250e37835dae804604be22417ddf281944f34a5ba545336a1433c14ae7
-
SHA512
8166c5d0f100a91b9ea8625130463f1f44d86ad3b16edad41000c6d2b8a9181824125ad627d8b1cc8320225dd99fc7460acbbcd2a2186f823f11d32c9400ff33
-
SSDEEP
768:99BPLCJtLlwjNnxqKQwBGvykM4CRsONuJaG3NG2sZqN1DJtm:J+Llwx4q4JIwajeu
Malware Config
Signatures
Files
-
5a389c250e37835dae804604be22417ddf281944f34a5ba545336a1433c14ae7.exe windows x86
e55912dd339867017d9f9fa7b7292a67
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord696
ord628
EVENT_SINK_AddRef
DllFunctionCall
ord563
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord100
Sections
.text Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ