Static task
static1
Behavioral task
behavioral1
Sample
81cb90e308a32d4e046e24481d66624e03aba72ac3cfc1fc7e567264c3aab436.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
81cb90e308a32d4e046e24481d66624e03aba72ac3cfc1fc7e567264c3aab436.exe
Resource
win10v2004-20221111-en
General
-
Target
81cb90e308a32d4e046e24481d66624e03aba72ac3cfc1fc7e567264c3aab436
-
Size
696KB
-
MD5
79f63ccd760d3e25e46181548f6827b7
-
SHA1
c1886b54ea6cd133cff4339da56447ff70701a2b
-
SHA256
81cb90e308a32d4e046e24481d66624e03aba72ac3cfc1fc7e567264c3aab436
-
SHA512
72659aae10236f1025783e6bb53719e3f3b1a0e467c67c7a33848ff48de4c121dd439af08ae5aa42e18b5449649a91b974587f64afa55b40acb32f397b561cac
-
SSDEEP
12288:iIWUFvzMS9foF/tl1sZmwMxa4UjP3Onpymcz5UMkBxvgX9BQcwF9r:tMiAJtliZmwAa4UjP31B5U/ZkvQ39
Malware Config
Signatures
Files
-
81cb90e308a32d4e046e24481d66624e03aba72ac3cfc1fc7e567264c3aab436.exe windows x86
ee3e89205e960fa91dee021cbfdb0d8a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord690
MethCallEngine
ord516
ord518
ord660
ord593
ord595
ord599
ord520
ord631
ord632
EVENT_SINK_AddRef
ord529
ord560
ord561
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
ord607
ord608
ProcCallEngine
ord644
ord537
ord645
ord681
ord685
ord100
ord689
ord610
ord617
ord546
ord581
Sections
.text Size: 176KB - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 516KB - Virtual size: 515KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ